-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 14 Apr 2020 12:26:29 +0200 Source: awl Binary: awl-doc libawl-php Architecture: source all Version: 0.60-1+deb10u1 Distribution: buster-security Urgency: high Maintainer: Davical Development Team <davical-devel@lists.sourceforge.net> Changed-By: Florian Schlichting <fsfs@debian.org> Description: awl-doc - Andrew's Web Libraries - API documentation libawl-php - Andrew's Web Libraries - PHP Utility Libraries Closes: 956650 Changes: awl (0.60-1+deb10u1) buster-security; urgency=high . * Fix two security vulnerablilites (closes: #956650) + CVE-2020-11728 "Session::__construct() allows use of the current time as a session key" + CVE-2020-11729 "LSIDLogin() is insecure and can allow user impersonation" Checksums-Sha1: 8ba00df6284e3c50874d5cfd35c7bc84bdffb2e4 1974 awl_0.60-1+deb10u1.dsc 8f44f07b26608abeaaf1f299665d1b0343bf1927 124772 awl_0.60.orig.tar.xz 6ff9ea57f7b0a6bbdc6218a49e093d7fbfaf7e19 9688 awl_0.60-1+deb10u1.debian.tar.xz f1fbc3237d55a0e5d0030fdc51d650cffba0b1b6 311696 awl-doc_0.60-1+deb10u1_all.deb 6e3bc7977fffc904152a7289bc70f7ae3d477b78 7522 awl_0.60-1+deb10u1_amd64.buildinfo b10fb1312bb328098afb6b8378f181588097aa8f 97892 libawl-php_0.60-1+deb10u1_all.deb Checksums-Sha256: cda3e6e95bd70b60dfca805da54f22a9f53b1617eec876c33d3eb227fa1ceb32 1974 awl_0.60-1+deb10u1.dsc 18fd4c47d45422ae8f4b84d194a28fb70fa1d4b0c9fc59dc800cf60130a745e3 124772 awl_0.60.orig.tar.xz aae77bdc712ce20decf97a96f863c5c51e1cbd660d7a7cb4b17b01e46047b719 9688 awl_0.60-1+deb10u1.debian.tar.xz 18b415eaee0969b2364660c5c3c0f902b6091f938012541941c8136244cdbb2a 311696 awl-doc_0.60-1+deb10u1_all.deb 50f480907d1907fd29e3b441d22cd730ef578d3c1ba51a28d1473b52aec66abf 7522 awl_0.60-1+deb10u1_amd64.buildinfo e37979d4a74833507fa8d26fc68a316a099f05e06724ce07ae47ab38e4690c33 97892 libawl-php_0.60-1+deb10u1_all.deb Files: 0dfe355ec642f50ada054e30e0b625e4 1974 php optional awl_0.60-1+deb10u1.dsc 4fd2eaf25a7570f167f8f4eb970b496d 124772 php optional awl_0.60.orig.tar.xz 19f247eaeb55d4ec310cd1956ef25e3b 9688 php optional awl_0.60-1+deb10u1.debian.tar.xz 32a343f97295004719d810a4b62eccb7 311696 doc optional awl-doc_0.60-1+deb10u1_all.deb 6e463a5cb53ff00f2d8e5836d4319ce3 7522 php optional awl_0.60-1+deb10u1_amd64.buildinfo e1568fa25ea11c030b7f8e803a9b46ab 97892 php optional libawl-php_0.60-1+deb10u1_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEMLI8i05qOwnqprZSEpc7bnLcB7UFAl6dQJ8ACgkQEpc7bnLc B7UwZg//QD0nIslnlMFwez8Jp1cECr2X471eNiLzic3KvQVK+AF2OQi2xvbnP8xW /c/7nml6AostcSWf72bREhiHISBF2BiruciYbk5J3HQ8CKNfPHfl+Dn/r+XoD2Ic XkxgSyg/TLvJU7tSJf8uJUGwO/ZVEvQs8N5RByoZl1Mkjm5N7NVvpe7KBQHfQfsM ZXh9f+V/K/kckgyiWSHzHP0gALuz0EYFxVuL0Aea3aHSgtFORV/6scVD1/5hbwQK qE+F18R6Yk8h1SkND4AjwLJNmy+0VWtLtek/dj1hof1P8Zn7fTkXXQ0oCktn9rxK E7560BDIfII/algU2pldA9uhMnI0S58iLYOxyjnaahR6Og7qeM4oHEWoEUgd7YBZ vk+wCYbbftY4C8NWPMS0WGoQ7dQbcvAnZrI01ruWoQdL1D6UQbUejfgGzwZWJ8xd lRYapHmMs/US6TwsVX0T2E6u7CX8fk4vRc/1uONKu+7zCiAZ48NzvtJlfkDL1fDF BrYo4tVRGQ/PMT9QUJAqpaSKo5rI1/cn8kVFydiPyuksBR485N273uAzgsd4I1Pq KnEhjxAMicrjqJtheVfudqCbeSZia3PabKFkuO10JZsxmr2modv0StLpnoEi5quQ RgR2fWprOWblR0sx4M9MctR4us1d/pROaCSonL1FvMcUaLcxkxs= =vbPI -----END PGP SIGNATURE-----
