Accepted moin 1.7.1-3+lenny3 (source all)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Thu, 11 Mar 2010 23:09:05 +0100
Source: moin
Binary: python-moinmoin
Architecture: source all
Version: 1.7.1-3+lenny3
Distribution: stable-security
Urgency: high
Maintainer: Jonas Smedegaard <dr@jones.dk>
Changed-By: Giuseppe Iuculano <iuculano@debian.org>
Description:
python-moinmoin - Python clone of WikiWiki - library
Closes: 569975
Changes:
moin (1.7.1-3+lenny3) stable-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* Fixed CVE-2010-0668: Multiple security issue related to configurations that
have a non-empty superuser list, the xmlrpc action enabled, the SyncPages
action enabled, or OpenID configured. (Closes: #569975)
* Fixed CVE-2010-0669: MoinMoin does not properly sanitize user profiles
* Fixed CVE-2010-0717: The default configuration of
cfg.packagepages_actions_excluded does not prevent unsafe package actions
* hierarchical ACL security fix: error when processing hierarchical ACLs,
which can be exploited to access restricted sub-pages.
Checksums-Sha1:
b38a7db1a28783271eb8aab3b87b149396340ada 1259 moin_1.7.1-3+lenny3.dsc
e8a9216e5e3a479ec724df147928ef9bed72c494 89391 moin_1.7.1-3+lenny3.diff.gz
4684e8e06a0387caddc30cfb820f71946f44cebb 4510584 python-moinmoin_1.7.1-3+lenny3_all.deb
Checksums-Sha256:
adf6f2e99c531ec0c775b09da396db36c871a14e7b9a480ff8a7f6ff1d2342d1 1259 moin_1.7.1-3+lenny3.dsc
0bbbe860209eda16de306bd9cd062cb4f758cf336410680769efcbf872caca2b 89391 moin_1.7.1-3+lenny3.diff.gz
4234eb2594a0a4b6ee5f30a8e374d92740c2ae5f4f13a50e602c2e5b59c6a8f2 4510584 python-moinmoin_1.7.1-3+lenny3_all.deb
Files:
66683a3699687a13f1d814e24bc46dbd 1259 net optional moin_1.7.1-3+lenny3.dsc
38256114fbb76fcb388ce5ca148acbac 89391 net optional moin_1.7.1-3+lenny3.diff.gz
a9440eb4eccc639f5dc1c7e2f27a9857 4510584 python optional python-moinmoin_1.7.1-3+lenny3_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
iEYEARECAAYFAkuaAbMACgkQNxpp46476ap5TgCghZvI1nIomv9SBsl6yzBkRC2p
EmcAoIERWqAP94z57o3tg2ZpJ2bQ7Hv3
=xOG/
-----END PGP SIGNATURE-----
Accepted:
moin_1.7.1-3+lenny3.diff.gz
to main/m/moin/moin_1.7.1-3+lenny3.diff.gz
moin_1.7.1-3+lenny3.dsc
to main/m/moin/moin_1.7.1-3+lenny3.dsc
python-moinmoin_1.7.1-3+lenny3_all.deb
to main/m/moin/python-moinmoin_1.7.1-3+lenny3_all.deb