Accepted phpwiki 1.3.14-1 (source all)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Sat, 29 Sep 2007 17:15:07 +0100
Source: phpwiki
Binary: phpwiki
Architecture: source all
Version: 1.3.14-1
Distribution: unstable
Urgency: high
Maintainer: Matt Brown <mattb@debian.org>
Changed-By: Matt Brown <mattb@debian.org>
Description:
phpwiki - informal collaborative website manager
Closes: 416796 418571 418577 424607 429201 438785 439104 441390 441936 444201
Changes:
phpwiki (1.3.14-1) unstable; urgency=low
.
* New upstream release 1.3.14
* Contains fixes for CVE-2007-3193, CVE-2007-2024 and CVE-2007-2025,
fixed in NMU by Thijs Kinkhorst. Thanks.
* Remove patches merged upstream
- 03-dba-open-existing
- 07-versiondata-base64-decode
- 08-upgrade-remove-user-table
- 09-upgrade-sql-syntax-fixes
- 10-upgrade-password-portable
- 11-upgrade-sqlite-nopass
* Drop PHP4 support, add missing libapache2-mod-php5 dependency.
(Closes: #438785)
* Add Depend on debconf-2.0 for cdebconf support. (Closes: #441936)
* Fix debconf template errors. Thanks to Helge Kreutzmann. (Closes: #418571)
* New translations:
- pt thanks Ricardo Silva (Closes: #416796)
- de thanks to Helge Kreutzmann (Closes: #418577)
* Updated es translation thanks to Carlos Galisteo (Closes: #424607)
* MonoBook theme tested and working OK. (Closes: #444201)
* Symlink schemas from dbconfig-common directory to documented locations.
(Closes: #439104)
.
phpwiki (1.3.12p3-6.1) unstable; urgency=high
.
* NMU by the testing security team, with maintainer approval.
* CVE-2007-3193: lib/WikiUser/LDAP.php in PhpWiki before 1.3.13p1, when the
configuration lacks a nonzero PASSWORD_LENGTH_MINIMUM, might allow remote
attackers to bypass authentication via an empty password, which causes
ldap_bind to return true when used with certain LDAP implementations.
(Closes: #429201)
* CVE-2007-2024, CVE-2007-2025: Unrestricted file upload vulnerability in
the UpLoad feature (lib/plugin/UpLoad.php) in PhpWiki 1.3.11p1 allows
remote attackers to upload arbitrary PHP files with a double extension, as
demonstrated by .php.3, which is interpreted by Apache as being a valid
PHP file.
(Closes: #441390)
Files:
04347ac8719d2738f972d67d4e3171b3 632 web optional phpwiki_1.3.14-1.dsc
e6f747756c5534a5ba4d3775098997e0 3388499 web optional phpwiki_1.3.14.orig.tar.gz
54a3ca637dfb2e959274b7b6767e47d1 52505 web optional phpwiki_1.3.14-1.diff.gz
7b6cc548048a0a20c8e37084ee4e906b 3203712 web optional phpwiki_1.3.14-1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFG/oXz/pqN2EBUqwgRArDCAJ9C83t4D/nCDENMZyoqIfCcKl4g+wCfeWbT
ejDc30ejG8m2Uw8dDisw0lw=
=Axg9
-----END PGP SIGNATURE-----
Accepted:
phpwiki_1.3.14-1.diff.gz
to pool/main/p/phpwiki/phpwiki_1.3.14-1.diff.gz
phpwiki_1.3.14-1.dsc
to pool/main/p/phpwiki/phpwiki_1.3.14-1.dsc
phpwiki_1.3.14-1_all.deb
to pool/main/p/phpwiki/phpwiki_1.3.14-1_all.deb
phpwiki_1.3.14.orig.tar.gz
to pool/main/p/phpwiki/phpwiki_1.3.14.orig.tar.gz