-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Sun, 20 Jan 2008 01:33:52 +0100 Source: horde3 Binary: horde3 Architecture: source all Version: 3.1.3-4etch2 Distribution: stable-security Urgency: high Maintainer: Horde Maintainers <pkg-horde-hackers@lists.alioth.debian.org> Changed-By: Gregory Colpart (evolix) <reg@evolix.fr> Description: horde3 - horde web application framework Closes: 461131 Changes: horde3 (3.1.3-4etch2) stable-security; urgency=high . * Fix XSS vulnerabilities (see CVE-2007-6018 for more informations). (Closes: #461131) * Fix privilege escalation in the Horde API. Files: 65c2b4458281e2e4c844b7bd4af52ba3 682 web optional horde3_3.1.3-4etch2.dsc db60e2c62f488824247429c35ace45fd 12893 web optional horde3_3.1.3-4etch2.diff.gz e1cff2548fbd2f1984e2cf956ecd43f8 5261396 web optional horde3_3.1.3-4etch2_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFHk7ynXm3vHE4uyloRApAOAJ9qiL7mbwF4XkiHK14RBvexNz6sBQCg6Qf3 m2uQ7tRd/WFUDcQ9a707OK0= =mtIt -----END PGP SIGNATURE----- Accepted: horde3_3.1.3-4etch2.diff.gz to pool/main/h/horde3/horde3_3.1.3-4etch2.diff.gz horde3_3.1.3-4etch2.dsc to pool/main/h/horde3/horde3_3.1.3-4etch2.dsc horde3_3.1.3-4etch2_all.deb to pool/main/h/horde3/horde3_3.1.3-4etch2_all.deb