-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 16 Jan 2015 20:30:12 +0100 Source: sympa Binary: sympa Architecture: source amd64 Version: 6.1.11~dfsg-5+deb7u2 Distribution: wheezy-security Urgency: high Maintainer: Debian Sympa team <pkg-sympa-devel@lists.alioth.debian.org> Changed-By: Emmanuel Bouthenot <kolter@debian.org> Description: sympa - Modern mailing list manager Changes: sympa (6.1.11~dfsg-5+deb7u2) wheezy-security; urgency=high . * Add a patch to fix a vulnerability in the web interface (wwsympa) which allows one to send himself by email any readable file by the sympa user on the filesystem. Checksums-Sha1: 23ca5a21686719c105276b8026e7ea7192ab2980 2553 sympa_6.1.11~dfsg-5+deb7u2.dsc a7725139d382de7db90a1f40274c82d335952713 5428470 sympa_6.1.11~dfsg.orig.tar.gz 7673920330e8a2de5ae0fd509c656b98aa22739d 123307 sympa_6.1.11~dfsg-5+deb7u2.debian.tar.gz 7ba475b936cf16601bf78a0341682cf828d1014d 3155532 sympa_6.1.11~dfsg-5+deb7u2_amd64.deb Checksums-Sha256: 3a822de2580a0bd71c799affde51d3089421fd448977a7973ca148367915f9d6 2553 sympa_6.1.11~dfsg-5+deb7u2.dsc 68d09f0532fabafec539733c898cd579eea81ac23f4a71914ba47e42595e4b63 5428470 sympa_6.1.11~dfsg.orig.tar.gz 9ccd3bde32d34c25d7a5f8aac48eb4e3235df101ecc1b3b884822199c0399512 123307 sympa_6.1.11~dfsg-5+deb7u2.debian.tar.gz c61380790c169c1332dbf59444a54af977c9ccbd8bbafb9d60cc6e300010d660 3155532 sympa_6.1.11~dfsg-5+deb7u2_amd64.deb Files: f40d8851fa7f4ac1b20227bd3b515f31 2553 mail optional sympa_6.1.11~dfsg-5+deb7u2.dsc 1acddec6b91809ee03e11661a78c216c 5428470 mail optional sympa_6.1.11~dfsg.orig.tar.gz 9dff2e7111e1bb055e1e459357a8b085 123307 mail optional sympa_6.1.11~dfsg-5+deb7u2.debian.tar.gz 18ae070daf67e68fe1a5516354300361 3155532 mail optional sympa_6.1.11~dfsg-5+deb7u2_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJUvDjwAAoJEEsHdyOSnULDCdwP/R0j22t3Rn+LJiMUVfCWqZTu 5DpdbXzFa9dR9SxHsRFz8M8eC6L4zYA6xtOUvllYfrsdPnvtD+qdOOzi5EFDLbrC Te5UUMmfubytfO2Ek5bxlGNf2BrtlzUmN6aFFwrj+1H0WsOmy+Y5aWwS6hAgbxg+ XWUYfih8Ghyp3mvCTYx9oQXuYcOPC5zrfSF+6qQwaBLmcCxKbEnANxjVmnq9VrY0 CwICnrUFmpa9yt1s0BJVwoSIBPYv3tkmiZr14ZKv+nlGcCA3CKy1jSMVePOkQ3k9 wzMbmvtZ8Z/fCf6MkC5avUBBpoX45Qgq6FcbMENU4Zc0fHp8q0UQ8Ry5oqcvwSHe 8PrXef2HHwxVQWkJHAZ8+6SGtsqxiO4WYXErdQmGIFLwwJOvN6ePmoc+zyRv04AW 5SETfkf32xxQZsDcN7GW9B1H4SpPPqMJOxPbPI9XQJeyB6zOq623UvpVmbJoKbtE tUpsqixq9Me1YO8OVSvQRUn8Mc4BpxPczk8kYqPo+f9kRWTl6cjjfYPfddRcn6tH D5ByqwAw8A4wGTEVihgryhcFX+RaDxo0g9p/ccYpauZsBIhDbRlHoKU2eu33ezSY OdMi7PT4blt5ap1E18oBwJPM/LLTJPnrjNlm2vTwYByKr04Cm/esvf8KZkMSsJYs T6iRpARkovtsN4cA62Sk =j35F -----END PGP SIGNATURE-----