-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Tue, 11 Dec 2007 08:45:46 +0000
Source: htdig
Binary: htdig htdig-doc
Architecture: source i386 all
Version: 1:3.2.0b6-3.1etch1
Distribution: stable-security
Urgency: high
Maintainer: Debian QA Group <packages@qa.debian.org>
Changed-By: Steffen Joeris <white@debian.org>
Description:
htdig - WWW search system for an intranet or small internet
htdig-doc - Documentation for the htdig package
Changes:
htdig (1:3.2.0b6-3.1etch1) stable-security; urgency=high
.
* Non-maintainer upload by the security team
* Fix XSS in htsearch by not displaying the sort type in
htsearch/Display.cc and libhtdig/ResultFetch.cc anymore, if it is
unrecognised, thanks to William Grant
Fixes: CVE-2007-6110
Files:
cd4c8534f4615e145331c49ce61d6dc8 616 web optional htdig_3.2.0b6-3.1etch1.dsc
8a6952f5b97e305dbb7489045bad220f 3104936 web optional htdig_3.2.0b6.orig.tar.gz
c604a5e5b383b92701751cc59dc42f64 86277 web optional htdig_3.2.0b6-3.1etch1.diff.gz
8ef47406cfd1e8e443a1fd52600f5852 528278 doc optional htdig-doc_3.2.0b6-3.1etch1_all.deb
eb919a14cb3b39e5bb897d1402d70c52 1850284 web optional htdig_3.2.0b6-3.1etch1_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFHXoq062zWxYk/rQcRAndzAKCyxEZcnmLVFl6LGtMiIBZVst1SEwCeKuqO
7cUier1rs6WsESdqYJ6fHXw=
=qXS3
-----END PGP SIGNATURE-----
Accepted:
htdig-doc_3.2.0b6-3.1etch1_all.deb
to pool/main/h/htdig/htdig-doc_3.2.0b6-3.1etch1_all.deb
htdig_3.2.0b6-3.1etch1.diff.gz
to pool/main/h/htdig/htdig_3.2.0b6-3.1etch1.diff.gz
htdig_3.2.0b6-3.1etch1.dsc
to pool/main/h/htdig/htdig_3.2.0b6-3.1etch1.dsc
htdig_3.2.0b6-3.1etch1_i386.deb
to pool/main/h/htdig/htdig_3.2.0b6-3.1etch1_i386.deb