-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 13 Oct 2016 07:33:27 -1000 Source: spip Binary: spip Architecture: source Version: 3.1.3-1 Distribution: unstable Urgency: high Maintainer: SPIP packaging team <spip-maintainers@lists.alioth.debian.org> Changed-By: David Prévot <taffit@debian.org> Description: spip - website engine for publishing Changes: spip (3.1.3-1) unstable; urgency=high . * Upload stable 3.1 branch to unstable for Stretch * Document CVE in previous changelog entry * New upstream version 3.1.2, with non-critical XSS security fixes * New upstream version 3.1.3, with security fixes: - Exec Code Cross-Site Request Forgery [CVE-2016-7980] - Reflected Cross-Site Scripting [CVE-2016-7981] - File Enumeration / Path Traversal [CVE-2016-7982] - Template Compiler/Composer PHP Code Execution [CVE-2016-7998] - Server Side Request Forgery [CVE-2016-7999] * Refresh mutualisation as of r99658 * Update Standards-Version to 3.9.8 Checksums-Sha1: 08777349d54e6ab94f314f375e82c9d97b1ff253 1543 spip_3.1.3-1.dsc ac541816e81bb0038b156829f380c8c0f4ba9008 5807444 spip_3.1.3.orig.tar.xz cc46ee18d5f8cc66dbfaf34a8dd2b9397405dca8 78568 spip_3.1.3-1.debian.tar.xz Checksums-Sha256: 1e61a20bca12adc0bde1e1599f7c2de05de3b632d93ca069b390999699a41688 1543 spip_3.1.3-1.dsc 033fad6b1bd18d4523b984ac662934c2e6ff57c20aaa4d3995f49bec4764df5c 5807444 spip_3.1.3.orig.tar.xz f7249f7580145891fe9f3cbde75437db01ce573851fd6e00e59890a883f08864 78568 spip_3.1.3-1.debian.tar.xz Files: 66ebfc4c5f15cfd50add33290ae3768c 1543 web extra spip_3.1.3-1.dsc e8f46bf2da5143d1e47862c26c7ad66a 5807444 web extra spip_3.1.3.orig.tar.xz 51993101b4c1a556f20aa7aa7427e77b 78568 web extra spip_3.1.3-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQEcBAEBCAAGBQJYBVeIAAoJEAWMHPlE9r08f9YH/1JGnNn9+IBfNxBLgkvMnIRs s7FFXo45scTj2vMPCPiPBMCq68hsRNMJBKwwhk9yHk9FeQl6X6sktT59rwphSVNK P5pdgkvqqptzi8xHzK5bF4B7xvVlr8gONEXZALJGtamwcXCND4ggcMz6wPw7Jieq eMU1G94CXkDMWk0eNnGeMKW7upr3YEOfH6WsBgbmd0RwmbtCPxOIpRMsfUQe+IxA MnzvpinDWmEJCmtNJajp/j7XQC56XkCLQy+Xi548S3ig9iYtOYJeoyjSWveqeT4D WJZRjEdg3lHsGR7iugdmj+uVsvOZkQu/m5zCkqGPR7YIroFZRpxDNSdayTpq1DM= =Y7FJ -----END PGP SIGNATURE-----