-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Wed, 1 Nov 2006 22:22:41 +0100 Source: ingo1 Binary: ingo1 Architecture: source all Version: 1.0.1-1sarge1 Distribution: stable-security Urgency: high Maintainer: Horde Maintainers <pkg-horde-hackers@lists.alioth.debian.org> Changed-By: Lionel Elie Mamane <lmamane@debian.org> Description: ingo1 - email filter component for Horde Framework Closes: 396099 Changes: ingo1 (1.0.1-1sarge1) stable-security; urgency=high . * Security update: - Fix remote autenticated user arbitrary command execution via shell metacharacters in mailbox name (closes: #396099) This is CVE-2006-5449. * Change maintainer to Horde team. Files: b8be1fc591da938deb08cb78a9d42f0d 683 web optional ingo1_1.0.1-1sarge1.dsc 509bf92a2ee44597d6ffd9a0a9b4a039 733108 web optional ingo1_1.0.1.orig.tar.gz 358e14a64fe43a56cc1b9742f271c3ec 5161 web optional ingo1_1.0.1-1sarge1.diff.gz 83f7044a2861f8e6aaea0c684fb2f6e0 760018 web optional ingo1_1.0.1-1sarge1_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (GNU/Linux) iD8DBQFFSj8kXm3vHE4uyloRAnlLAJ47kwlCnyBZKGdzhVhmXJu6pZ70NACgnMK7 f+Qd0ESTqDnogSZBTh/EuPM= =BMC2 -----END PGP SIGNATURE----- Accepted: ingo1_1.0.1-1sarge1.diff.gz to pool/main/i/ingo1/ingo1_1.0.1-1sarge1.diff.gz ingo1_1.0.1-1sarge1.dsc to pool/main/i/ingo1/ingo1_1.0.1-1sarge1.dsc ingo1_1.0.1-1sarge1_all.deb to pool/main/i/ingo1/ingo1_1.0.1-1sarge1_all.deb