-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 15 Jun 2021 22:33:37 +0200 Source: prosody Architecture: source Version: 0.9.12-2+deb9u3 Distribution: stretch-security Urgency: medium Maintainer: Matthew James Wild <mwild1@gmail.com> Changed-By: Anton Gladky <gladk@debian.org> Changes: prosody (0.9.12-2+deb9u3) stretch-security; urgency=medium . * Non-maintainer upload by the LTS Security Team. * Fix CVE-2021-32917: mod_proxy65: Restrict access to local c2s connections by default * Fix CVE-2021-32921: Use constant-time algorithm for string comparison Checksums-Sha1: 762d0d9e275ad8e24a6b89e274737a266c4e709f 2066 prosody_0.9.12-2+deb9u3.dsc 955d7f7144c794300bd6d7342407d5e597125505 15372 prosody_0.9.12-2+deb9u3.debian.tar.xz 3fd7f0dd7cd5ef62356cf414293a6e633d6f162b 6026 prosody_0.9.12-2+deb9u3_source.buildinfo Checksums-Sha256: fa501a7599acac1b9fbf000ce136409f2e58bcf2642bc98b46b2b66d1b3757ce 2066 prosody_0.9.12-2+deb9u3.dsc b64fd9c00b40d7557208b011968f3f8a3704642fd8cf617107b5c6978055e89d 15372 prosody_0.9.12-2+deb9u3.debian.tar.xz b1e299534d7185ca1c65276e8699398e14014b89c62c3afb2baf7ea59172f6d8 6026 prosody_0.9.12-2+deb9u3_source.buildinfo Files: 8eb1241aa030d9c5fe12411d0c70b41d 2066 net extra prosody_0.9.12-2+deb9u3.dsc dc8426b7d899b61b4c7dc24dfe9fa1ef 15372 net extra prosody_0.9.12-2+deb9u3.debian.tar.xz 596b2daa8b1d7cbb23d6b3225d3781ec 6026 net extra prosody_0.9.12-2+deb9u3_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEu71F6oGKuG/2fnKF0+Fzg8+n/wYFAmDJDzcACgkQ0+Fzg8+n /wbADA//UMM/ulzj1JZVCZ0rw8EQZtH26v0M9PgAI5Ei9XmPHAM+BgcSyp3Rn+GN IpUz3mUsBwi95x1OqMHaCloFR0foMIaRYKQYFP0LB6aTrLFTj1JXOyjoxxcYhoIn FjrTwozHFrqt5lQ3rxcFQ6yebCCTpbbZcpp1W1Z6XM6fwZPdxZDeymWKyRXCkUAp tNhHMFX3Bi4dAWEuiC1QG16XQL2JmoQDcyfQPIQcunb+s8RHwoHcktml5qcIIrtS /oskAIZr8XEBUwCh678dyaHktciqhzh73coW5GH3rNmlIQA6bwf5CJns4jy7VEgM bt3S0s7HCzAwawsTvVf429Ir9mOfwSndETCqSG4EfTfZuIay4jXIR47glC3o7OOd dtsX3bcvzk5DetNTLAut0QR0w4lDAwduNv2nlCEeHuHQQ34bzcYaxJYXYAugV+Mc FinUAxbZBp2SMTorl0jXH8Y/93sVqRq0M/jnOH3ONpDec52SXQ2Hm3zpSNdbGOku E1znhJOjM2Tq/WwYiagvBiMYDIBNcfTWq6RDjnKL+F9K3SVcSRzUHoswJtHZ+hQd HsMVkpTbfswsWMkQT19P6qywuLha7EGigIPnk/sn8EZcZqG3PF3vLRfER89OSYxY 4MLOWUMfmbRVw8jceVWBj+YRBq8x3f6Zb5ebi2rT/TT2ICkE4O0= =jMAy -----END PGP SIGNATURE-----