-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 15 Aug 2016 23:09:16 +0100 Source: extplorer Binary: extplorer Architecture: source all Version: 2.1.0b6+dfsg.3-4+deb7u4 Distribution: wheezy-security Urgency: high Maintainer: Thomas Goirand <zigo@debian.org> Changed-By: Chris Lamb <lamby@debian.org> Description: extplorer - web file explorer and manager using Ext JS Changes: extplorer (2.1.0b6+dfsg.3-4+deb7u4) wheezy-security; urgency=high . * CVE-2016-4313: Fix archive traversal exploit in .zip extraction. The unzip/extract feature allowed for path traversal as decompressed files can be placed outside of the intended target directory if the archive content contained "../" characters. Checksums-Sha1: 7170b074f45fd39ccad5c1c80c37666f8d71f332 1892 extplorer_2.1.0b6+dfsg.3-4+deb7u4.dsc be7ea3a1af9ab4949d5083d30b78dd53aab74952 333069 extplorer_2.1.0b6+dfsg.3.orig.tar.gz e341dcd4894ee4afd04c4f182f9c7744ac6e7299 16529 extplorer_2.1.0b6+dfsg.3-4+deb7u4.debian.tar.gz 4d9ea71c6a1bb19fde506ebebeeb60ea6c6f6f42 351548 extplorer_2.1.0b6+dfsg.3-4+deb7u4_all.deb Checksums-Sha256: 0bc2ebbca605a5de48c9c22f7921c05e69be3c9e5f00fcccf17101fb26f0f9af 1892 extplorer_2.1.0b6+dfsg.3-4+deb7u4.dsc 466040f5755f9f27247b1bded0d764ed5b0ff6007d3de08413059d53341969fb 333069 extplorer_2.1.0b6+dfsg.3.orig.tar.gz f932ffb5e8d3752e3b80a023ebf886a79ac087772f02ee323d0cee740943fb1c 16529 extplorer_2.1.0b6+dfsg.3-4+deb7u4.debian.tar.gz 1a17648521fc4739e0a6023ab169982d05e6c7f2948e381aea9f323daad0798c 351548 extplorer_2.1.0b6+dfsg.3-4+deb7u4_all.deb Files: a62fe43fc5c1bb0f485c8d1c5121764d 1892 web optional extplorer_2.1.0b6+dfsg.3-4+deb7u4.dsc 44d5dce06700b2c99499e57c0525106e 333069 web optional extplorer_2.1.0b6+dfsg.3.orig.tar.gz 4bf2c46a5873472e36925d52eed44a42 16529 web optional extplorer_2.1.0b6+dfsg.3-4+deb7u4.debian.tar.gz 86784c734cf5784c740b053c609a162e 351548 web optional extplorer_2.1.0b6+dfsg.3-4+deb7u4_all.deb -----BEGIN PGP SIGNATURE----- iQIcBAEBCAAGBQJXsj/1AAoJEB6VPifUMR5YEVkQAJ947EMuL6dFrG+MFdVWU4y3 hF+qlji8SA/J3tYY1Qcvs8K4btyn3aalg2i0w2eZZEQ4T52I+bZqN6jXbZSBuxDh QIC84deZ338DRlaZ9oCEfPvDyTw/1dpanWwZKYngVDwagvNY9OvQpetA7gXbIxts wNP8hfDqS0RQOjLZDhpTwU7O+3RM7VwwmuPMx2wJI3S1cG9pzS9Rvzgy4a3qGN8a Wc3CcxepfPSf14e9HYZVBM9cwqDkROx60H3g2Wz2MMo0JctgWvA+qUI+j0kviK9g nJZQ3uV9scMW3TsUq2NhZwNXeQeGWB1X0mnOKzY5EMTMYMvsFCt7RE/qILs/PbBN gCsl2Gpo0Fc7rdt0VyKs0rgs3a2M9bJg+hnJoktbEkLd3Tc8AJFvfbwlP9/EiZPz gPvpxXk8Y3/7e7LmXIRM7olsxhFtpphB9cz1yKZsRkxlpjc1ug7mcxZoxIHwhP2O /cDXfHquIgzkNnXYwowzX7Funo8oGx4M8Dg46Qb/kpG30lHR3ejLVilorKqN3X5/ PY9CUUZk7KzMxMCQwCbH09RgbiZmOcF2l3/3AbFJ98jRfUMuvHBUz+Y/WMJZjN9j V79JbJw1XQslhYRX/2QP5xCQ863r7zeFnR5qJHS1kqpYl78nrHu3XpPydFpNSr9I OldaSt3s0m0CurwA6pvZ =IiS6 -----END PGP SIGNATURE-----