-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 15 Jan 2014 17:35:44 -0600 Source: drupal7 Binary: drupal7 Architecture: source all Version: 7.14-2+deb7u2 Distribution: wheezy-security Urgency: high Maintainer: Luigi Gangitano <luigi@debian.org> Changed-By: Gunnar Wolf <gwolf@debian.org> Description: drupal7 - fully-featured content management framework Changes: drupal7 (7.14-2+deb7u2) wheezy-security; urgency=high . * Backported fixes from version 7.26 addressing several security vulnerabilities; see advisory in https://drupal.org/SA-CORE-2014-001 + Impersionation while using OpenID (CVE-2014-1475) + Access bypass in the taxonomy module (CVE-2014-1476) + Security hardening in the Form API Checksums-Sha1: 90cc25e648ebc993026d3ade751c8a412aaa9146 1849 drupal7_7.14-2+deb7u2.dsc 78eac8541a266971a266ae58c22dd3dbdd54525b 215179 drupal7_7.14-2+deb7u2.debian.tar.gz 16d61a303229bd99b9636cbb95dcb9814d6c377d 3184592 drupal7_7.14-2+deb7u2_all.deb Checksums-Sha256: e4721ccb5e182490fbd353f91582e1a1a5b79d8132f569f3058b60069556d068 1849 drupal7_7.14-2+deb7u2.dsc 1c61589cb8d99af576ad69de64847fccb7846ad70117275cfdfb71a269edc5d4 215179 drupal7_7.14-2+deb7u2.debian.tar.gz 7d8c76aab26dfb1b09647cc0a1efa9f39e86922f17d89543e31114cc260f1602 3184592 drupal7_7.14-2+deb7u2_all.deb Files: 0f83012e0f3bfe074fa449ba60b6d616 1849 web extra drupal7_7.14-2+deb7u2.dsc e17021f6696dbb9a1b4d7d9be0ce6f55 215179 web extra drupal7_7.14-2+deb7u2.debian.tar.gz ee3a5f96f10ffd1d2de06fe14d8c34e7 3184592 web extra drupal7_7.14-2+deb7u2_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.15 (GNU/Linux) iQIcBAEBCAAGBQJS2bThAAoJEGc6A+TB25Ifj6UQAI58qCMreVI+r+CU3hrmXmIF 1pOnovki9O4eYQvelMzg3U1IvOAjnCs43sMpH4EPSYCQDGWTN5GF5EGpn3W/8sRQ bqHqJ9NygMBV6Ho89d+q1dPoPItaRjHJ+r8d1n3WJaSUsVLeQouIURzogtsrbK+L Pmtad+dfWN8/4BThMsNQPL7yfpD4QDOAcMn8lyO8ZY+yJMc0pSqhpiMsQWsVW0UH 5p8MjKCytn0zomdmLMoXgyPKlUay9iyrEsrQmFZGls4uQfqAW5THSGVDd18qR04o SxGgy2+sc+kscD+8BS9eN3SErl/uiyA1/dIeuRdimXYlzDo/UvAExPjkk37w3Tfy knfwyCWLSraJDzFWaY58rBRmRWPSm4GlMs8OL6EelIDeXhY9ncYLxq78xavdLaOe ea4NzclFEJk24+4E6ebJC62tYfotfF1ALPMwE5CxX88Pc2qk67Xr6JMX2OId1ZyU uT77RbNn7obcnVrb9CVYXeI8dGeCoPR1mnEgXK6YTlPzyoO5JGfitFOlG6+0Zz61 2gkt5aSI4WMHTHRtI5uhDd9zqbzlaLsz3pxV6bo4HxzkrS73L/hjc7g2eiXuRDyH n7FruhvGzKkos/nTFxUcYBzM2ty9kQj6Ja2l0GTbFhiRIDl1NacLSZHPx7C7rRol MiUmpFkZOGjp780nOwXC =WHN2 -----END PGP SIGNATURE-----