Accepted xdg-utils 1.1.0~rc1+git20111210-6+deb7u3 (source all) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 22 Feb 2015 03:29:59 +0000
Source: xdg-utils
Binary: xdg-utils
Architecture: source all
Version: 1.1.0~rc1+git20111210-6+deb7u3
Distribution: stable-security
Urgency: high
Maintainer: Per Olofsson <pelle@debian.org>
Changed-By: Michael Gilbert <mgilbert@debian.org>
Description:
xdg-utils - desktop integration utilities from freedesktop.org
Closes: 777722
Changes:
xdg-utils (1.1.0~rc1+git20111210-6+deb7u3) stable-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* Fix CVE-2015-1877: command injection vulnerability in xdg-open due to
not really local variables in dash (closes: #777722).
Checksums-Sha1:
f46a4c3bd29c75188d95aa7d4feb60311f5e66ae 2722 xdg-utils_1.1.0~rc1+git20111210-6+deb7u3.dsc
033d643da189a74a59d58a29cac8231931dacc6a 11940 xdg-utils_1.1.0~rc1+git20111210-6+deb7u3.debian.tar.gz
0244e022cc31de66cf9bfdbe79064b27742de49a 82506 xdg-utils_1.1.0~rc1+git20111210-6+deb7u3_all.deb
Checksums-Sha256:
9181c1ea8205fcd97951cc2f75e143c45e8fe03a0f5797ebc087d006b907142e 2722 xdg-utils_1.1.0~rc1+git20111210-6+deb7u3.dsc
08e6dbca542b95f47a3deba02dbd07547e7ad7e71331d11c71f656b82d7bc32a 11940 xdg-utils_1.1.0~rc1+git20111210-6+deb7u3.debian.tar.gz
08f4cd4d8f27d5201fd22c955a63f6f1bdfbc82441d485cd9b2efac9e6dbda56 82506 xdg-utils_1.1.0~rc1+git20111210-6+deb7u3_all.deb
Files:
a51d0dba840094732dcc6a9b767a7267 2722 utils optional xdg-utils_1.1.0~rc1+git20111210-6+deb7u3.dsc
bdbb6d9b6d08c43c241b7e72ee0615fa 11940 utils optional xdg-utils_1.1.0~rc1+git20111210-6+deb7u3.debian.tar.gz
06e3f434b7f0827755f913fc432d9ef2 82506 utils optional xdg-utils_1.1.0~rc1+git20111210-6+deb7u3_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=
=y/lD
-----END PGP SIGNATURE-----