-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 16 Jan 2019 17:51:47 -0600 Source: drupal7 Binary: drupal7 Architecture: source all Version: 7.52-2+deb9u6 Distribution: stretch-security Urgency: high Maintainer: Gunnar Wolf <gwolf@debian.org> Changed-By: Gunnar Wolf <gwolf@debian.org> Description: drupal7 - fully-featured content management framework Closes: 911791 Changes: drupal7 (7.52-2+deb9u6) stretch-security; urgency=high . [ William Blough ] * Add upstream fix for DATE_RFC7231 conflict with php7 (Closes: #911791) . [ Gunnar Wolf ] * SA-CORE-2019-001: Vulnerability in a third-party library (related to CVE-2018-1000888) * SA-CORE-2019-002: Arbitrary PHP code execution Checksums-Sha1: 4e96d7c7e21b1ae5005d6608a0afa2e8b078d6f0 1877 drupal7_7.52-2+deb9u6.dsc b90c9ffe85a6fbbf898a232e43e9e086f71675a3 205876 drupal7_7.52-2+deb9u6.debian.tar.xz aaaf31abb6bbfa16c744f271b49a7d2fdc35a28a 2527284 drupal7_7.52-2+deb9u6_all.deb c7442006888e1df4cdc8b6bdf219c44c2265aa51 9428 drupal7_7.52-2+deb9u6_amd64.buildinfo Checksums-Sha256: 0b75ce20d6e0d3f689d1dcce2cc7585bd7d5c641e76998370f763cd958b65ea5 1877 drupal7_7.52-2+deb9u6.dsc 18d22b699cfa6e4d668652bf264526ecb20519ac77715d87f92235a0c6a28613 205876 drupal7_7.52-2+deb9u6.debian.tar.xz c07dc21a51f825223af51de0855ef4ff50c538731a28a46f207a0e395a8cc018 2527284 drupal7_7.52-2+deb9u6_all.deb 60e950994b4e940d212efddb2fb6edf7f41f00dfecfe62cf62966a602d0bde10 9428 drupal7_7.52-2+deb9u6_amd64.buildinfo Files: 8a86052600983fceaeb3ff3f09c34d9a 1877 web extra drupal7_7.52-2+deb9u6.dsc 7509f6113e0dd2a1a29e1d9d1e64def4 205876 web extra drupal7_7.52-2+deb9u6.debian.tar.xz efd4e6715c0d39cb2485346b78b113d1 2527284 web extra drupal7_7.52-2+deb9u6_all.deb dcf856f7a00dc4829e2573e18c727892 9428 web extra drupal7_7.52-2+deb9u6_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEfHleU5lojd9m99YgSd0qTkl5YZwFAlw/0MsACgkQSd0qTkl5 YZzz3A/+JjayOhM5SghXAR8YyZlPq0adSGAOnouMk5up0zXLLrR8YU16CPrFVkNR 75lAB9ixEFOokfuijHa6ACjyYnK6ZtTQIVguZTi/YmSFq4wHrrQU18CE5LokpaSU UCF0XM3Cu5RECKSp3v3un2p8/0xnvM5VpSqldZgxVwRBI1GRRZKS2a7i3nALSVMQ EPlhrAioPy/9+/8YyNH75RRmTHtkPpLgi3P1FOzRWibArvxgN3D/o7FuBy8uomtH JEMyWwtM5yZDCWI1G+yA9H1Rlc8cRxUBjCt1oQgNmx4Bw9T66mu6a+5tj2qzyA50 dv1ziQ42Gu0Vbc2RmIoBsbcHHsMw2Z74ZrQxJJGHqScIUD+LV+d4kKofOaxlsY46 nf1YbCtXnX99VhMZoyv8JX9eywe4JIDvBN8lrmMfAHQiIwPvWEO5DC+R8isKLfyi Vb3lZhpLTIofOGYEVDNmwar+J1kdPyUe09fSbLjVv+DHdg61nYf9cDR/5+InKz+w kEQg+hRTRfXBlNk/W3AlvODMYZF5cAmbo+RRIkcQDjfSfuaIXptriTszxgjAvzuH RsiMc1xHtqFWr4rQVMp1luG8dQVjPxm8hkQFvr8gB/pAk356OgtXcdRjRG65yPLD eWhNIA40iE952h3j3Tdr+ZKrzzN4Zs6V8Cal6g4a0/z/LTRD9wk= =+FWI -----END PGP SIGNATURE-----