-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Sun, 27 Mar 2011 20:42:56 +1100 Source: imp4 Binary: imp4 Architecture: source all Version: 4.2-4lenny3 Distribution: oldstable-security Urgency: high Maintainer: Horde Maintainers <pkg-horde-hackers@lists.alioth.debian.org> Changed-By: Steffen Joeris <white@debian.org> Description: imp4 - webmail component for horde framework Closes: 598584 Changes: imp4 (4.2-4lenny3) oldstable-security; urgency=high . * Non-maintainer upload by the security team * Fix cross-site scripting via the fm parameters (Closes: #598584) Fixes: CVE-2010-3695 Checksums-Sha1: 356d3e12edcf02541b8f80efbb44c91a2426f3b8 1116 imp4_4.2-4lenny3.dsc 7bb149100600e3638a96d4d1992149d39b9c8ab2 5042955 imp4_4.2.orig.tar.gz ad7e3b610b2778e8ab0082dc1804b74075d3e9b0 16755 imp4_4.2-4lenny3.diff.gz aa5ce57a4f574ffaf40026ce6441933acceb06c0 4941254 imp4_4.2-4lenny3_all.deb Checksums-Sha256: abdda99a5ea5828673f3498a40b10a0ced6f4cf8cdc50df23d3e1b8306f639f6 1116 imp4_4.2-4lenny3.dsc 02302eeecf70067dee6eb5a8d2007cc9dfb3b11ba6e744f984b84541a5335fd4 5042955 imp4_4.2.orig.tar.gz 892e57732485049c1ac8877b2ff63908015a355fc4e69b89b6f9f7179731f07c 16755 imp4_4.2-4lenny3.diff.gz a65f931a9e06fc8698f152deeeed51729650d899f6e617d47aad26670fe6303c 4941254 imp4_4.2-4lenny3_all.deb Files: ff60348577a459760ebc48d28f2636cc 1116 web optional imp4_4.2-4lenny3.dsc 2ab4314b58bea1906a2f34acb3e09a2e 5042955 web optional imp4_4.2.orig.tar.gz 3fae3b5167957d6cfad5f517c9c0ca0a 16755 web optional imp4_4.2-4lenny3.diff.gz 0de636ad9e3a27d3ed6589cdb83d2e63 4941254 web optional imp4_4.2-4lenny3_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iEYEARECAAYFAk2PCC0ACgkQ62zWxYk/rQfepQCeOHEbw8dW3die7Y5D6sVr1ZQL LMMAnjlH+MtuwGSGxKrlevIgj272z/wR =VxfO -----END PGP SIGNATURE----- Accepted: imp4_4.2-4lenny3.diff.gz to main/i/imp4/imp4_4.2-4lenny3.diff.gz imp4_4.2-4lenny3.dsc to main/i/imp4/imp4_4.2-4lenny3.dsc imp4_4.2-4lenny3_all.deb to main/i/imp4/imp4_4.2-4lenny3_all.deb