-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Sat, 31 Jul 2010 15:57:41 +0200 Source: lxr-cvs Binary: lxr-cvs Architecture: source all Version: 0.9.5+cvs20071020-1.1 Distribution: unstable Urgency: high Maintainer: Giacomo Catenazzi <cate@debian.org> Changed-By: Nico Golde <nion@debian.org> Description: lxr-cvs - A general hypertext cross-referencing tool Closes: 575745 584671 588036 588137 Changes: lxr-cvs (0.9.5+cvs20071020-1.1) unstable; urgency=high . * Non-maintainer upload by the Security Team. * Backported upstream security fixes from current release (Closes: #584671). * This update addresses the following security issues: - CVE-2010-1448: reflected XSS via title tag on search page (Closes: #588036). - CVE-2010-1625: reflected XSS in search results page (Closes: #588137). - CVE-2009-4497: XSS via the i parameter of the ident script (Closes: #575745). Checksums-Sha1: 7492c59dd538b96b12bd44c40b63f04593abb23c 1042 lxr-cvs_0.9.5+cvs20071020-1.1.dsc 38f50b6fdd65a277319cc67ada39cb10ec515d8e 9601 lxr-cvs_0.9.5+cvs20071020-1.1.diff.gz 249ecfc78c981a9cb95b037aca2752ad20bf0651 72170 lxr-cvs_0.9.5+cvs20071020-1.1_all.deb Checksums-Sha256: bd53ab6c4def0a7e740c36a6348a470f31fd0bd0046dc975ad7bb3d2bfa6efaf 1042 lxr-cvs_0.9.5+cvs20071020-1.1.dsc ff8efd1d2d77bd6ab7937c3c5ae79fb9e876de3149ada951fb967ea736b9e3f6 9601 lxr-cvs_0.9.5+cvs20071020-1.1.diff.gz ed77ffc0464e5da4917ad04efd77d8194ec163fd017c8b1fb106e13e10241b4f 72170 lxr-cvs_0.9.5+cvs20071020-1.1_all.deb Files: 9508cb537bd58d9d8f7139b9f8bdca34 1042 misc extra lxr-cvs_0.9.5+cvs20071020-1.1.dsc 7d096b0577c133d6c87b6e37db1425e8 9601 misc extra lxr-cvs_0.9.5+cvs20071020-1.1.diff.gz 977a60352cb067c67e34cebfdd781f08 72170 misc extra lxr-cvs_0.9.5+cvs20071020-1.1_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iEYEARECAAYFAkxUNl8ACgkQHYflSXNkfP9ogACfSJx9m8qcCheb66P104uF9UQc n/UAn0Rjs8t2zVoD53B5/QlIo8D/DI+8 =nc94 -----END PGP SIGNATURE----- Accepted: lxr-cvs_0.9.5+cvs20071020-1.1.diff.gz to main/l/lxr-cvs/lxr-cvs_0.9.5+cvs20071020-1.1.diff.gz lxr-cvs_0.9.5+cvs20071020-1.1.dsc to main/l/lxr-cvs/lxr-cvs_0.9.5+cvs20071020-1.1.dsc lxr-cvs_0.9.5+cvs20071020-1.1_all.deb to main/l/lxr-cvs/lxr-cvs_0.9.5+cvs20071020-1.1_all.deb
