Accepted squirrelmail 2:1.4.23~svn20120406-2+deb8u4 (source all) into oldoldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 01 Aug 2019 11:42:00 +0200
Source: squirrelmail
Binary: squirrelmail
Architecture: source all
Version: 2:1.4.23~svn20120406-2+deb8u4
Distribution: jessie-security
Urgency: high
Maintainer: Jeroen van Wolffelaar <jeroen@wolffelaar.nl>
Changed-By: Sylvain Beucler <beuc@debian.org>
Description:
squirrelmail - Webmail for nuts
Changes:
squirrelmail (2:1.4.23~svn20120406-2+deb8u4) jessie-security; urgency=high
.
* Non-maintainer upload by the Debian LTS Team.
* Fix XSS due to improper handling of RCDATA and RAWTEXT elements
CVE-2019-12970
* Refresh previous fix from upstream for several XSS vulnerabilities
CVE-2018-14950 CVE-2018-14951 CVE-2018-14952 CVE-2018-14953
CVE-2018-14954 CVE-2018-14955
Checksums-Sha1:
3998c51968236dd7f3b6a4256e7a15bc815ddb73 1686 squirrelmail_1.4.23~svn20120406-2+deb8u4.dsc
570121f6c9e0b67cb08b78d6d7a187664f9cd862 37964 squirrelmail_1.4.23~svn20120406-2+deb8u4.debian.tar.xz
6842a3043b30098b3bff103c9f0827bce9dd022a 500122 squirrelmail_1.4.23~svn20120406-2+deb8u4_all.deb
Checksums-Sha256:
45e7b53dbe2425fca3bfd5c8b38813f8e96a1bffeace2c0c4ef7d816e3924f88 1686 squirrelmail_1.4.23~svn20120406-2+deb8u4.dsc
258bc07465b6fc38fc834872546cfdd8b0749fbd7f75f748c5a46fdf097c3b9c 37964 squirrelmail_1.4.23~svn20120406-2+deb8u4.debian.tar.xz
3195515f6393ff589fb552f36b2be81edfff66182fb56bf55053fbb5d3f64452 500122 squirrelmail_1.4.23~svn20120406-2+deb8u4_all.deb
Files:
f8282cee03b5b5f68809562c10fcf1d1 1686 web optional squirrelmail_1.4.23~svn20120406-2+deb8u4.dsc
86365aa9f86a4efdcb6d6a75a561b07b 37964 web optional squirrelmail_1.4.23~svn20120406-2+deb8u4.debian.tar.xz
4ae33c6312511bb811bdc4916a46eb93 500122 web optional squirrelmail_1.4.23~svn20120406-2+deb8u4_all.deb
-----BEGIN PGP SIGNATURE-----
iQEzBAEBCgAdFiEEQic8GuN/xDR88HkSj/HLbo2JBZ8FAl1C2hQACgkQj/HLbo2J
BZ8suAf5AamcNR0p0pUss0yn3dRcRWFC5XqKkbrUyqC3anPCkN5Uda/SSQdvrGdd
IJHT9a3pEcCGcTDypQY3lOGvTNrqn7pOMSGtoYEL243vTgyqgMrk1HGCgPUQLp9A
sp/mmNVDFh51FXXF/cJOdcXOY8RL2SgwSy9sE99ymODjoG2WGevpbvrk3t+1V20f
BiavFh6EV7NTDeq8OdAqu/qMmb/2328nUGyD3FD55TvPMCui0iyVLNviqrqNbIO5
1q6ROG1Mum/1KMxEwtB6xpJvYBkVqrvP61cdBMWmH1WB3plEbEAmYRLTXw0lJ9ts
Ne++M1tozOSrhurRBNnffQI6rjPb+g==
=AJnE
-----END PGP SIGNATURE-----