-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 26 Aug 2016 12:07:53 +0200 Source: tryton-server Binary: tryton-server tryton-server-doc Architecture: source all Version: 3.4.0-3+deb8u2 Distribution: jessie-security Urgency: high Maintainer: Debian Tryton Maintainers <maintainers@debian.tryton.org> Changed-By: Mathias Behrle <mathiasb@m9s.biz> Description: tryton-server - Tryton Application Platform (Server) tryton-server-doc - Tryton Application Platform (Server Documentation) Changes: tryton-server (3.4.0-3+deb8u2) jessie-security; urgency=high . * Adapting the release of the last changelog entry to be in sync with the archive. * CVE-2016-1241 Adding patch 03-CVE-2016-1241_prevent_read_of_password_hash.patch. * CVE-2016-1242 Adding 04-CVE-2016-1242_sanitize_path_in_file_open.patch. Checksums-Sha1: bc6579f84c10b6fb469f6515b80529602fca670a 2144 tryton-server_3.4.0-3+deb8u2.dsc 88a971ea415d606574833b88c0afd9d9ec7fe67d 30588 tryton-server_3.4.0-3+deb8u2.debian.tar.xz c93e918de7da54d3b8abb121073c96bb4bc43ab1 317678 tryton-server_3.4.0-3+deb8u2_all.deb e158405c682a8d91717fd678e1e6fd0e7594b3ea 104616 tryton-server-doc_3.4.0-3+deb8u2_all.deb Checksums-Sha256: 0ac4e9ecad199e4326441c1d638555403de85b2d9eefcb431966db2eac582cab 2144 tryton-server_3.4.0-3+deb8u2.dsc ecea0430dd07ba760f703893a3a24cae25656f43021a39010042f990826ec65f 30588 tryton-server_3.4.0-3+deb8u2.debian.tar.xz ab31711b90b1ae25ba27ca98d3d71d8d14cc67a1122f1c768329b381d3226481 317678 tryton-server_3.4.0-3+deb8u2_all.deb 0d3ed9ac4f4528a55eabae6009f0cd1116ebdd51d0e995437bafae4552ba8baf 104616 tryton-server-doc_3.4.0-3+deb8u2_all.deb Files: e1ef092abc7461b9caa323ee82f077c3 2144 python optional tryton-server_3.4.0-3+deb8u2.dsc f54ebaef4802be9aa4d75a676d792b3d 30588 python optional tryton-server_3.4.0-3+deb8u2.debian.tar.xz 52eced33ffe03a20cf7d4ea080e0d293 317678 python optional tryton-server_3.4.0-3+deb8u2_all.deb 6176fe7f2901c465592789c7ae4c23cf 104616 doc optional tryton-server-doc_3.4.0-3+deb8u2_all.deb -----BEGIN PGP SIGNATURE----- Comment: Signed by Mathias Behrle iQIcBAEBCgAGBQJXwBbqAAoJENbQm+SEBbv2F5gP/RLmn1Qw3J+l0rHjeSyKL2ke c9gqCQwvTTf1WRwEyqcc4HpMM++APbsj0ZISKMxFJIixiB+uWVoVR8j5bUQQPG5W TYs7BZVfWgo7FGp+aIDckAeuXRsaVQ1sHHrppDunCKYnbMqmeSGJYzdDDZ2ucqsg 5zlW2Wd5iRN2/0BK+aL8c1IQt18Chz2XETDdap/F53chr0pJdDED8J1D2peE9sxm 0GShwz2mM5N9z75G9IJSIW9Fa+a+vDBz5FnNursI1MRZ61vBENWWthbhdCbRDXgR ZCMcQb+f7zRvjbu0FNMjgML8tPJ9w5mexexNnhlXaqehokGILmxAFq/uK2TGP5ay z9PPY8oKxx3Oo4KrM9xPzqIMtS52mh0m4GoA1UW0ZcEuQmuzCuEO/JNK2BVCpXXK p5PB01i0O7y9Vot8MXd5DadLN50Y4GvDNMlLps19TDNBN02dyuagJbT1jjfhBjDz vHs+Z+DQT+BT/VyX2nAiltNydXpg9HyyeRCAZFrSIlRlLdCIuJrxizsbTIcrkPiR +VH8FZfLkQUcciC5avceviDbGlCy7PyLelpgMA/W2oNk/Ti6y3bYpgOHXi59OAEX pCZpfrHzfxskBPRQ/wyhZnBrYcNImpWHACSGIrqQagGGxTQ/hnGklr5cJ7nJFomj 7ynL5yn+oh5yE35QQBaf =2/t1 -----END PGP SIGNATURE-----