-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Sat, 31 Jul 2010 15:57:41 +0200
Source: lxr-cvs
Binary: lxr-cvs
Architecture: source all
Version: 0.9.5+cvs20071020-1.1
Distribution: unstable
Urgency: high
Maintainer: Giacomo Catenazzi <c...@debian.org>
Changed-By: Nico Golde <n...@debian.org>
Description:
lxr-cvs - A general hypertext cross-referencing tool
Closes: 575745 584671 588036 588137
Changes:
lxr-cvs (0.9.5+cvs20071020-1.1) unstable; urgency=high
.
* Non-maintainer upload by the Security Team.
* Backported upstream security fixes from current release (Closes: #584671).
* This update addresses the following security issues:
- CVE-2010-1448: reflected XSS via title tag on search page (Closes:
#588036).
- CVE-2010-1625: reflected XSS in search results page (Closes: #588137).
- CVE-2009-4497: XSS via the i parameter of the ident script (Closes:
#575745).
Checksums-Sha1:
7492c59dd538b96b12bd44c40b63f04593abb23c 1042 lxr-cvs_0.9.5+cvs20071020-1.1.dsc
38f50b6fdd65a277319cc67ada39cb10ec515d8e 9601
lxr-cvs_0.9.5+cvs20071020-1.1.diff.gz
249ecfc78c981a9cb95b037aca2752ad20bf0651 72170
lxr-cvs_0.9.5+cvs20071020-1.1_all.deb
Checksums-Sha256:
bd53ab6c4def0a7e740c36a6348a470f31fd0bd0046dc975ad7bb3d2bfa6efaf 1042
lxr-cvs_0.9.5+cvs20071020-1.1.dsc
ff8efd1d2d77bd6ab7937c3c5ae79fb9e876de3149ada951fb967ea736b9e3f6 9601
lxr-cvs_0.9.5+cvs20071020-1.1.diff.gz
ed77ffc0464e5da4917ad04efd77d8194ec163fd017c8b1fb106e13e10241b4f 72170
lxr-cvs_0.9.5+cvs20071020-1.1_all.deb
Files:
9508cb537bd58d9d8f7139b9f8bdca34 1042 misc extra
lxr-cvs_0.9.5+cvs20071020-1.1.dsc
7d096b0577c133d6c87b6e37db1425e8 9601 misc extra
lxr-cvs_0.9.5+cvs20071020-1.1.diff.gz
977a60352cb067c67e34cebfdd781f08 72170 misc extra
lxr-cvs_0.9.5+cvs20071020-1.1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
iEYEARECAAYFAkxUNl8ACgkQHYflSXNkfP9ogACfSJx9m8qcCheb66P104uF9UQc
n/UAn0Rjs8t2zVoD53B5/QlIo8D/DI+8
=nc94
-----END PGP SIGNATURE-----
Accepted:
lxr-cvs_0.9.5+cvs20071020-1.1.diff.gz
to main/l/lxr-cvs/lxr-cvs_0.9.5+cvs20071020-1.1.diff.gz
lxr-cvs_0.9.5+cvs20071020-1.1.dsc
to main/l/lxr-cvs/lxr-cvs_0.9.5+cvs20071020-1.1.dsc
lxr-cvs_0.9.5+cvs20071020-1.1_all.deb
to main/l/lxr-cvs/lxr-cvs_0.9.5+cvs20071020-1.1_all.deb
--
To UNSUBSCRIBE, email to debian-devel-changes-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/e1ofwxq-0001jr...@franck.debian.org
