-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 24 May 2021 00:02:12 +0200 Source: php-horde-text-filter Architecture: source Version: 2.3.5-3+deb10u2 Distribution: buster Urgency: medium Maintainer: Horde Maintainers <team+debian-horde-team@tracker.debian.org> Changed-By: Mike Gabriel <sunweaver@debian.org> Closes: 982769 Changes: php-horde-text-filter (2.3.5-3+deb10u2) buster; urgency=medium . [ Mike Gabriel ] * debian/control: + Drop Debian QA Group from Uploaders: field, add myself instead. . [ Sylvain Beucler ] * CVE-2021-26929: An XSS issue was discovered in Horde Groupware Webmail Edition (where the Horde_Text_Filter library is used). The attacker can send a plain text e-mail message, with JavaScript encoded as a link or email that is mishandled by preProcess in Text2html.php, because bespoke use of \x00\x00\x00 and \x01\x01\x01 interferes with XSS defenses. (Closes: #982769). Checksums-Sha1: ba9a1df9ac4bb9c6b46043a303411a8a273a7476 2214 php-horde-text-filter_2.3.5-3+deb10u2.dsc 4c4d139f50f924411d1c9ec858dae390dbbafcd0 6400 php-horde-text-filter_2.3.5-3+deb10u2.debian.tar.xz a977fafeeb1e289153c9a8ac17e6fdd7baea24a1 6585 php-horde-text-filter_2.3.5-3+deb10u2_source.buildinfo Checksums-Sha256: 7f03e602a9d2b6bd8633a33495200dfde956adf119153bfe2dc3c24ac3715aeb 2214 php-horde-text-filter_2.3.5-3+deb10u2.dsc 79213eb953f4e1ddb57efa4d36eb0ff23bbe22289cb005e00d92fab939d838a2 6400 php-horde-text-filter_2.3.5-3+deb10u2.debian.tar.xz 6ca36fc98c0e9d3437df6cf4f9a30f97d92283e971b9fd40ee51227d87aa21a1 6585 php-horde-text-filter_2.3.5-3+deb10u2_source.buildinfo Files: d2ca6399f2c3f4dcaae375e3757d4836 2214 php optional php-horde-text-filter_2.3.5-3+deb10u2.dsc e47c2d26dc242991a740b0cbee16d889 6400 php optional php-horde-text-filter_2.3.5-3+deb10u2.debian.tar.xz a89c0e92de1f5c57cb3a8ad9d69cbcfa 6585 php optional php-horde-text-filter_2.3.5-3+deb10u2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJJBAEBCAAzFiEEm/uu6GwKpf+/IgeCmvRrMCV3GzEFAmCq0XQVHHN1bndlYXZl ckBkZWJpYW4ub3JnAAoJEJr0azAldxsxSQEP/jGS58hBb9WIVmI5ejO92sUk70jq IflMjRtVRN3O9OgY79IW9RfbZZHqH8SBsoA/lMMzWRp1AVWm/TStfJn8AyywvczT LWCz0cWuBMjIcJWv6ruwMtjNq+7u3nFTEkFXFARsNY1uIvCb9f87fHj0uaMrlDkU ZgqLkgH7fBWdooq12E7zlYMfunG6orEQoqSxA/GoPxQkZqGkqaGVEBTVOwgXIbwb prDK3ruBqnj++FLbH1Tv3aYnrJ4vxSFvk5Xv0Mqx7ivtfkNTwIvH7LhuPi8/M5Mn b/c+k9IlWNpR5BhSd2kO6ZLTvjJd+WzAZWYqRUprGbQa8tTeqviSI1R0tZBPcoOA oNBrGcw5n082yBwaWDsTM3h85h2s5+/5cT9wSGDcLkF/SP5PaXiadtHJMpGRf35k 630U23oQHCa2D4uQ9HD7OweuACRVEsyl9eE9KP2WMwyzZfeeHJIaBOaxasT0k3vR iRp9Y7xq6XwVx6ByObaEsX6DeGah2/v5ulGRNc5r3fCFv0u/0Z2p9v6z8hc3oPiB mRbkChkT9wsH5URK34bLxhegEMB00WoIL2McBqwRaaExsrCVoSyir8n3oH+hxgKK 58ri+c2EHVBUXu1FwrqC2QLL3ycMKRmhEiAwh2JjphTXSd9CcKhL64SfqYIXy+bu 1GVuexDuANP5s5qZ =yvXT -----END PGP SIGNATURE-----
