-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Mon, 03 Feb 2014 11:23:58 +0200 Source: libapache2-mod-nss Binary: libapache2-mod-nss Architecture: source amd64 Version: 1.0.8-4 Distribution: unstable Urgency: medium Maintainer: Debian 389ds Team <pkg-fedora-ds-maintainers@lists.alioth.debian.org> Changed-By: Timo Aaltonen <tjaalton@ubuntu.com> Description: libapache2-mod-nss - NSS-based SSL module for Apache2 Closes: 729626 731627 Changes: libapache2-mod-nss (1.0.8-4) unstable; urgency=medium . * mod_nss-clientauth.patch: - Fix CVE-2011-4973: FakeBasicAuth authentication bypass. (Closes: #729626) * mod_nss-nssverifyclient.patch: - Fix CVE-2013-4566: incorrect handling of NSSVerifyClient in directory context. (Closes: #731627) * control: Bump policy to 3.9.5, no changes. Checksums-Sha1: 4fc4d8569597fb4bbe82f39e1eeead4cef4a19cd 1824 libapache2-mod-nss_1.0.8-4.dsc 69abaaba716eb0a161458a12e27f6c56d84ff221 16104 libapache2-mod-nss_1.0.8-4.debian.tar.xz 79aff158200814d8bcbaa5ac5110926e43b6f7a6 69368 libapache2-mod-nss_1.0.8-4_amd64.deb Checksums-Sha256: eaecfca61eadc105dcc02a1d31a32c580c5475510bc29001a444e42b81f6889d 1824 libapache2-mod-nss_1.0.8-4.dsc 7ca6e079db041e6c4dc524079939244000499ed0f2073ec576cb5071e1df2337 16104 libapache2-mod-nss_1.0.8-4.debian.tar.xz 4dcffd3c5844cf54afb378eee7df968174d33fd49357cb685c8c6d2c2958a996 69368 libapache2-mod-nss_1.0.8-4_amd64.deb Files: 3f0ad0257a0033dca0b5cc13c133ed09 1824 web extra libapache2-mod-nss_1.0.8-4.dsc 04cc3d05599361e73c4403bee7b4aab4 16104 web extra libapache2-mod-nss_1.0.8-4.debian.tar.xz 8c4803b7afda69a8ffc8b404dcb624a1 69368 web extra libapache2-mod-nss_1.0.8-4_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAEBAgAGBQJTC1qsAAoJEFb2GnlAHawEVVsH/RsgxC+re0XxlDfyThMGzpOA OTktuddvNw/4THy5aXa5rYBmxGcOCVaSwHS/ZG/umW/hO+3958owQUBpMPtHQCuw FeC0cfv35HUlfqcI/votoMq1SqwDz6vfrns57Lwybti4gUdZIgnzXIluEmplLHi5 luOyeIcnNvQrtj1BAhkNA/td8fO2FUG+R9nDm+nUD9lkisp5FsFAWVELJaB/c6/R FlWPAedp+5BMCnhad7rDrqcIoV+IeF6i0Vv3BWx6xs8BuhRfqzRFEVQ7xVUuHvYx lLosLBACSiBXnD5YTjxJ8dn6tJIP1lE12GCAoaqikWd3cPxA7baD4vbq+o7x7ks= =S4k1 -----END PGP SIGNATURE-----