-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 09 Nov 2020 21:03:02 +0200 Source: moin Binary: python-moinmoin Architecture: source all Version: 1.9.9-1+deb9u2 Distribution: stretch-security Urgency: high Maintainer: Steve McIntyre <93sam@debian.org> Changed-By: Thorsten Alteholz <debian@alteholz.de> Description: python-moinmoin - Python clone of WikiWiki - library Changes: moin (1.9.9-1+deb9u2) stretch-security; urgency=high . * Non-maintainer upload by the LTS Team. * security: fix stored XSS vulnerability via SVG attachment (CVE-2020-15275) * security: fix remote code execution via cache action (CVE-2020-25074) Checksums-Sha1: cbfa2651682219991ff1c09d560ad431069ef6ca 2052 moin_1.9.9-1+deb9u2.dsc d582126c443939cb09e650eeddd677ed7e8c3f99 37206341 moin_1.9.9.orig.tar.gz df337df5e87c42f81bb7283e7401855f6ecbff86 153864 moin_1.9.9-1+deb9u2.debian.tar.xz edbe8c887731f39253a0df026c3a34fe93f1e8bb 7044 moin_1.9.9-1+deb9u2_amd64.buildinfo 2a153e457ace59a425767692cb2cb919af1bdc96 7983198 python-moinmoin_1.9.9-1+deb9u2_all.deb Checksums-Sha256: 119ca1d9f2794a2c1142746abd3389e46f540ee6a7c89c82904c2b293c68e564 2052 moin_1.9.9-1+deb9u2.dsc 4397d7760b7ae324d7914ffeb1a9eeb15e09933b61468072acd3c3870351efa4 37206341 moin_1.9.9.orig.tar.gz 022356a84740c28e668cbb64d00fea93cef21e800d976c978da41ff9097fa17a 153864 moin_1.9.9-1+deb9u2.debian.tar.xz 0ea883ee62efec870eda94182cf38a5885e211102e6b52804d7f0384678c52f6 7044 moin_1.9.9-1+deb9u2_amd64.buildinfo c25238ce5d6ac4e9b507a2dbacc3ca8cd1c73d87687cbcdaa47ed2fb7827468e 7983198 python-moinmoin_1.9.9-1+deb9u2_all.deb Files: 2d639db068773ed5dd28416764135bcc 2052 net optional moin_1.9.9-1+deb9u2.dsc 32f02a5d0df06b80d889ca6cdc51593e 37206341 net optional moin_1.9.9.orig.tar.gz 85d835fbc98cf3e3984433fde4b6fb7b 153864 net optional moin_1.9.9-1+deb9u2.debian.tar.xz fe48967afcfd8a613ec50e0e759b3975 7044 net optional moin_1.9.9-1+deb9u2_amd64.buildinfo 016d7d6f7c6ab8f35865b328805d4d4b 7983198 python optional python-moinmoin_1.9.9-1+deb9u2_all.deb -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAl+q4kFfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYRyOBEACcJRz8K39P5il3xfq1XmjT59VzSjGT PFRKjPqyNlrJIKBtX1WzBt0DUwoYvUaQnWs9TUXivZ7xfhq2vFPtIQnoY1lYzqfn IogmvXUoa/OEX4wz2mFY5HeRB5xCTftmQzVVT8Kg23UBK+g2iKhC/MOK18oFAqVe K86SPR2xRCqT5xG9yY4wb1o70goUsDR30VXGMhS1Jsu3towuqd7GyRYJronX57ID 65zfYaOmkRF6jyq58pv1dYwXOJiNXWQaTSIPeWb2dQeVV8NssPxGlb7G83KwsnFy hEDh84CM7axkoIhDG+kE0rMSKqdO31pM4cedZdi+4eDRb+WMBhMFE4Is8lpGiO6T 4Tlee33L9sviGiLBeOWb6tHN6Qy7glQuAcHwmqQGYxUdYYy8uHEMmAe620rneayQ zqJYPyVmlKQwyAwGL9u0C40btbbY6jCdkaz1obx4ej1WmBaeF3h6ikqG2nkbFsBj ECKy3lRbdTMS++7ohmcYHNzZqJvlenk6LV6ri2+GxXsyDc8uw95CgtZCgz2i6VNp WjiKoYvI4ITopzRwWzTm+KYBhW4QBvjEciWKaznhIJTyVYhUHYIQAWfpuZkOaIDf ZdFegolh3DQHAdZwI31Er9t/fvaOJFi1X23+euxu3xIvV21HsaCvbvIQBXas0Ba3 UOZP8edRu3UxJg== =osUg -----END PGP SIGNATURE-----