Accepted graphite-web 1.1.4-5 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Thu, 17 Oct 2019 05:47:35 +0530
Source: graphite-web
Architecture: source
Version: 1.1.4-5
Distribution: unstable
Urgency: high
Maintainer: Debian Graphite Group <team+debian-graphite-team@tracker.debian.org>
Changed-By: Utkarsh Gupta <guptautkarsh2102@gmail.com>
Changes:
graphite-web (1.1.4-5) unstable; urgency=high
.
* Non-maintainer upload.
* Add patch to remove the 'send_email' function to avoid SSRF attack.
This was insecure, not used in the code, and was undocumented as well.
(Fixes: CVE-2017-18638)
Checksums-Sha1:
df7bd33f22f364f7959e51c343abc1e45f70800e 2253 graphite-web_1.1.4-5.dsc
af9c775176662151474709186adea91d5ab41089 227192 graphite-web_1.1.4-5.debian.tar.xz
63d0a180f44a4bc5f9b188d119d58e2921831ea2 7141 graphite-web_1.1.4-5_amd64.buildinfo
Checksums-Sha256:
924ec01cc0f33bd3ccf8aa7743ebbab29e8f44bf1a9a0055d77b72f432e9a068 2253 graphite-web_1.1.4-5.dsc
4f06c16e355292d4729d9bcc40130d398ed26b310c8090fc82fb7fa01f3d00f4 227192 graphite-web_1.1.4-5.debian.tar.xz
037e199804e5db35204555dd79ff2fe4a5cc752001b1f63437829b63b246ef25 7141 graphite-web_1.1.4-5_amd64.buildinfo
Files:
e7d8c9052cf63a9949f8db9e5473533c 2253 web extra graphite-web_1.1.4-5.dsc
98c42798bc087705ea034e4bff5dd8fb 227192 web extra graphite-web_1.1.4-5.debian.tar.xz
cdd14f8e66db1d252080f5a57ddfebd7 7141 web extra graphite-web_1.1.4-5_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=rAh8
-----END PGP SIGNATURE-----