-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 10 Mar 2012 11:41:05 +0100 Source: glpi Binary: glpi Architecture: source all Version: 0.80.7-2 Distribution: unstable Urgency: high Maintainer: Pierre Chifflier <pollux@debian.org> Changed-By: Pierre Chifflier <pollux@debian.org> Description: glpi - IT and Asset management software Closes: 429344 505983 662944 Changes: glpi (0.80.7-2) unstable; urgency=high . * Do not install embedded copy of phpCAS (Closes: #505983, #662944) As phpCAS is not yet packaged, this removes the related functionality. If you need phpCAS, see the README.Debian file for instructions. This closes the following security problems: CVE-2012-1104 CVE-2012-1105 * Bump Standards Version to 3.9.3 * Remove embedded code copy of tinymce, and depend on the Debian package * Remove embedded code copy of phpmailer, and replace it by the Debian package (Closes: #429344) Checksums-Sha1: 3dd748f6fa15a852e57faba4cb824ba7a2a4de98 1638 glpi_0.80.7-2.dsc ba75b4b388eb5c2520124259eb64fdaa8c5ec434 16382 glpi_0.80.7-2.debian.tar.gz a5339cd99209447859628cbea45eed23eef7d6e5 3466814 glpi_0.80.7-2_all.deb Checksums-Sha256: b1296bb1241b43310bae1cfa503b3b6caca178375f9b4fca5de551185be5dcde 1638 glpi_0.80.7-2.dsc f31f33c583289cd4fed88a60761d5224186c0f36e71370dc417370d1e34314ab 16382 glpi_0.80.7-2.debian.tar.gz a02e6fdb33dce7b5e1390afeaeb6d263d5b0f0399e062351945135f6e75e403e 3466814 glpi_0.80.7-2_all.deb Files: ad4c59b30030cb249ad60f360a0249f8 1638 web optional glpi_0.80.7-2.dsc 6321a8a4cedfa0f9a4fe8fd715240988 16382 web optional glpi_0.80.7-2.debian.tar.gz ec33655d94ca4ee5e6a40e4a10870f21 3466814 web optional glpi_0.80.7-2_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIcBAEBCAAGBQJPWzBmAAoJEMYaZNzxOTmY2UcP/3LjSyibjtbodgSAjjW87ozA VgXgkfhI7l07OlsWnE5zmtEDRXvJA073M6US5W4jHaaV6COXlTk2TyvuDyuJUC/B ihixgXBuofTvXBTJXFb6WkCa4r3xu+XQASoOfgofRMMnHxpuaktXB7VTudlfpyh/ YjLyx+dbMw/GqlU3m/pQFam2NyDhdqCcjhBVeIpxevDlHXbx7EpvIDALBA8E8gjn LZmOQhndkwN6aDtqOB+nT5aBaU3hia+U21TyTxHqkzddqk4e1xpJ03H7dPbV25W6 3Cl5nuerf4bCoIGIlBfUfl7LF5VMsTHThOlAOjcMi4dLsOIIKQPfvqmk+ucNvgPE WjXnIQMZT8l2T22BBUwVvvpQyoCnrJiUGiluuDndM9WI0vs7An/yoBCwxIVIvP67 u5DswvLn/GVm9AG9PbklihWPm1+/Q63tVi2m61TSuK84We0mAlnR9aTgsjIW248N 9j61F6ddIjKIXgDH/d3adAUF0mwPHRGjz8oPyt4D/6MvAajptkriT90nTQu5NPVr 0HoSSwepVMvvOpe5fuIphdQ/0xUsAmBrX0Y26+Fmva2tUoZAEIU+GE9QQl/A66f9 cbXf7xgyA6q3vB6LyKBXzIk9XAJsUVarHGJh5NBCB//+hH5+iKlu4VRVrpZaAJgs dSnOpwGf4mfO7jJBYKfH =ET7b -----END PGP SIGNATURE----- Accepted: glpi_0.80.7-2.debian.tar.gz to main/g/glpi/glpi_0.80.7-2.debian.tar.gz glpi_0.80.7-2.dsc to main/g/glpi/glpi_0.80.7-2.dsc glpi_0.80.7-2_all.deb to main/g/glpi/glpi_0.80.7-2_all.deb