-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 31 Jan 2019 23:16:08 +0530 Source: drupal7 Binary: drupal7 Architecture: source all Version: 7.32-1+deb8u14 Distribution: jessie-security Urgency: medium Maintainer: Luigi Gangitano <luigi@debian.org> Changed-By: Abhijith PA <abhijith@debian.org> Description: drupal7 - fully-featured content management framework Changes: drupal7 (7.32-1+deb8u14) jessie-security; urgency=medium . * Non-maintainer upload by the Debian LTS Team. * Fix CVE-2019-6339: remote code execution vulnerability exists in PHP's built-in phar stream wrapper. SA-CORE-2019-002 * Mention new license in d/copyright that came with the CVE-2019-6339 fix * Adjust d/rules to remove new license file from shipping Checksums-Sha1: 3b8213aba7675bf89d128607f2c0f5f3692e5e9c 1917 drupal7_7.32-1+deb8u14.dsc c673dfec976d86ec6079d503dc9d81f2cb73d262 3207974 drupal7_7.32.orig.tar.gz c920efd9ffc4e218b696c5dd3960ede837ca243e 215848 drupal7_7.32-1+deb8u14.debian.tar.xz 104bdc1b4935c127e18e6acb9764afc6b1627319 2497072 drupal7_7.32-1+deb8u14_all.deb Checksums-Sha256: 205a75e1094c401443cab936ed4e9a225b8b588649f5ef5e3207e1d89f4cfb32 1917 drupal7_7.32-1+deb8u14.dsc f5e6efc7269d1a6e35788ed84022da7da3edd9f7d5c7e5cfa04302de366cf206 3207974 drupal7_7.32.orig.tar.gz 7ead264bedfe6e65810a93291ae36fb5f88316d3a6bce8e90ff3115ce9a6b775 215848 drupal7_7.32-1+deb8u14.debian.tar.xz 4e35162c17291d0a88f664f84bdd939c6ae56ca6282cbe9ed5537d4878440144 2497072 drupal7_7.32-1+deb8u14_all.deb Files: 1f06d46c6a5126788d717c9c7df08cc5 1917 web extra drupal7_7.32-1+deb8u14.dsc 54754efc64474e8b9e0f8507a9f0ddca 3207974 web extra drupal7_7.32.orig.tar.gz 769bc2624ed14059ba56e8985c083231 215848 web extra drupal7_7.32-1+deb8u14.debian.tar.xz ed481a6c35f9d0e02b2e717812498176 2497072 web extra drupal7_7.32-1+deb8u14_all.deb -----BEGIN PGP SIGNATURE----- iQJIBAEBCgAyFiEE7xPqJqaY/zX9fJAuhj1N8u2cKO8FAlxVMEoUHGFiaGlqaXRo QGRlYmlhbi5vcmcACgkQhj1N8u2cKO/8zw//XkYR0H2+HvtvEDuoaIeC2udzG7fp P5ly77//V5yn7uJ8g9b3sq9nGdk3KxuMTzEtZVE0o9aLeLQQXe4oBI2pEV69rIOJ xg+VBO9YBqZDJVNV/Zm+qdWTIt1sGZ/a+rsWufXZnKQPQnwO4vBSol4TooZeMYl8 4dF9QsmmDDb5sPoLOzw83BNDXr7PXFK+T/BVgT6qmlRqXWCLXmNjnJDk78yiA9vf 95zm3jNgz6ht752/TysJp404U+LdH8DCSpj7vmrGXXHKYgWiQSpRj3KxC/XsFyOb 0YyhmPsv1bxHKrDwpF+tV0GXoSY6Tc4HSPLTcRaBoPNAOwl9aEjYrHL7nTZs2QvU 1m78BOQg1XGh1yv+tM2sLlRMDz9xeeiT0G4Wd5LJ5NMtyaaU8ZJQ8MPdIeMQqWWQ ++snN6kCKY4qryTHEqK7/7EocnngK2xv/Vg5MgWYFBly8A2efad6ebaH0KTf3Og+ S/a+EsPXyKfn5mR+nSy6sOnPtBJAw7aR3jzZ2SdBpcfLXQIRK+tAHG96cxqXPYU0 LR1k7m9mxqX3Tjk6VVpteJ9zEi1xqB30jEVSGnpQ/Wb+/woz984JMV3bTGc/eoqQ jQUtFRM/gRMc9PR1EYTj1wU9dd2ssel3QcUsJd7DuwERzj3lh5JuFvcWnSszCowy Ssh3BU/GOzYN/KE= =4S05 -----END PGP SIGNATURE-----