-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Mon, 10 Aug 2009 00:50:31 +0200 Source: zope2.10 Binary: zope2.10 zope2.10-sandbox Architecture: source amd64 all Version: 2.10.6-1+lenny1 Distribution: stable-security Urgency: high Maintainer: Jonas Meurer <mejo@debian.org> Changed-By: Jonas Meurer <mejo@debian.org> Description: zope2.10 - Open Source Web Application Server zope2.10-sandbox - sandbox instance for the zope2.10 web application server Closes: 540464 Changes: zope2.10 (2.10.6-1+lenny1) stable-security; urgency=high . * Fix two vulnerabilities in the ZODB ZEO network protocol (closes: #540464) - CVE-2009-0668 Arbitrary Python code execution in ZODB ZEO storage servers - CVE-2009-0669 Authentication bypass in ZODB ZEO storage servers Checksums-Sha1: 894be24b145be444ebb545d56a4a52c5144273d0 1356 zope2.10_2.10.6-1+lenny1.dsc 94c79a6be01356559f210aaed910d69cc05f64bc 7263938 zope2.10_2.10.6.orig.tar.gz 14a6dc6bc1d23599ae56c2b42731610cffa34a21 14698 zope2.10_2.10.6-1+lenny1.diff.gz 48f44f947c464c72f15efcf8fb091335a5514496 7060682 zope2.10_2.10.6-1+lenny1_amd64.deb 8416864ab9b08c040f06597adbb61e1811ee035f 179592 zope2.10-sandbox_2.10.6-1+lenny1_all.deb Checksums-Sha256: b099a87ab8d406488012bb468df6c6088730bdb70da6d6ec5c42f15777130618 1356 zope2.10_2.10.6-1+lenny1.dsc 92f26db1b8c3422226630d923a0e01538543da62a7709d57b59f222777e36733 7263938 zope2.10_2.10.6.orig.tar.gz 4fcaaec2119de29338ddc491d702b449e9409aa3f20165cd02628bb49a0757f2 14698 zope2.10_2.10.6-1+lenny1.diff.gz dc4d6cc09add26f4bed65e15521854b3580776b6b970489116ff278bfb65a463 7060682 zope2.10_2.10.6-1+lenny1_amd64.deb 75c286f61ea874e201106fa8ececc36c1ba119e5fdf6444d03f6650906d9da39 179592 zope2.10-sandbox_2.10.6-1+lenny1_all.deb Files: 79b85989ea078482571388ac9847f0dd 1356 web optional zope2.10_2.10.6-1+lenny1.dsc 6e983f0e5a0f6f1eedf347038e09b571 7263938 web optional zope2.10_2.10.6.orig.tar.gz ad40802de32fbe651eb5a0efac571cd5 14698 web optional zope2.10_2.10.6-1+lenny1.diff.gz d4244d62ff01cbc4c4f74e97bc5cff06 7060682 web optional zope2.10_2.10.6-1+lenny1_amd64.deb 5011d75ba94a95bbc9162fe7489f032c 179592 web optional zope2.10-sandbox_2.10.6-1+lenny1_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEARECAAYFAkp/VDwACgkQd6lUs+JfIQJJ6wCdEnhyKbngrnLv8vX1mdiiASym W/MAoJRBUAabVnMljOuWZwHGmhXdRO7A =XtHa -----END PGP SIGNATURE----- Accepted: zope2.10-sandbox_2.10.6-1+lenny1_all.deb to pool/main/z/zope2.10/zope2.10-sandbox_2.10.6-1+lenny1_all.deb zope2.10_2.10.6-1+lenny1.diff.gz to pool/main/z/zope2.10/zope2.10_2.10.6-1+lenny1.diff.gz zope2.10_2.10.6-1+lenny1.dsc to pool/main/z/zope2.10/zope2.10_2.10.6-1+lenny1.dsc zope2.10_2.10.6-1+lenny1_amd64.deb to pool/main/z/zope2.10/zope2.10_2.10.6-1+lenny1_amd64.deb