-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 18 Jun 2020 13:00:57 -0500 Source: drupal7 Architecture: source Version: 7.52-2+deb9u11 Distribution: stretch-security Urgency: medium Maintainer: Gunnar Wolf <gwolf@debian.org> Changed-By: Gunnar Wolf <gwolf@debian.org> Changes: drupal7 (7.52-2+deb9u11) stretch-security; urgency=medium . * SA-CORE-2020-004: CSRF due to incomplete validation of file uploads in form input Checksums-Sha1: 8572fb2c2af61f45f3014a41310ec60cce4d7053 1276 drupal7_7.52-2+deb9u11.dsc 64ce24f51a2505edd2312a008bd426d9c7550f45 223428 drupal7_7.52-2+deb9u11.debian.tar.xz 9832f4c68a2af4056ae355e56cf0af5e3622b3f8 8955 drupal7_7.52-2+deb9u11_source.buildinfo Checksums-Sha256: fef584c096af7bdaa8be2429bd6f0a9be26c853df9d05de9adc70feb0ed73354 1276 drupal7_7.52-2+deb9u11.dsc a95f0b8afd02e82d1debb86a76468ef977ec33b8a1a3d44c193f360bb6f3e676 223428 drupal7_7.52-2+deb9u11.debian.tar.xz e58efffadd69616c270cf93e75270d545998c02f35c83babd2cf2573fe44200f 8955 drupal7_7.52-2+deb9u11_source.buildinfo Files: 03657c62ff1f8c1241992a88a46bf0dc 1276 web extra drupal7_7.52-2+deb9u11.dsc d0894f60678268ae9e1da3edb24e1f33 223428 web extra drupal7_7.52-2+deb9u11.debian.tar.xz 8235ed78d143e1b495962b2cae9868eb 8955 web extra drupal7_7.52-2+deb9u11_source.buildinfo -----BEGIN PGP SIGNATURE----- iHUEARYIAB0WIQRgswk9lhCOXLlxQu/i9jtDU/RZiQUCXuuwXwAKCRDi9jtDU/RZ iUrWAQDWgCbnVUqPyf0sOzz0uexp/zN+O1+fDiizGo/M0xDvuAD/U1UuhqODB6Yb tXHOFKoo+BdGb+0ulpHHXBVT/MEXaAM= =6MK2 -----END PGP SIGNATURE-----