-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 08 Feb 2017 23:07:54 +0500 Source: viewvc Binary: viewvc viewvc-query Architecture: source all Version: 1.1.22-1+deb8u1 Distribution: jessie-security Urgency: high Maintainer: David Martínez Moreno <ender@debian.org> Changed-By: Lev Lamberov <dogsleg@debian.org> Description: viewvc - web interface for CVS and/or Subversion repositories viewvc-query - utility to query CVS and Subversion commit database Changes: viewvc (1.1.22-1+deb8u1) jessie-security; urgency=high . * Non-maintainer upload * [SECURITY] Fix "CVE-2017-5938" (escape nav_data name to avoid XSS attack) Checksums-Sha1: 7790ab970a026fead967e0e3ab00acaf8c6e52f6 2010 viewvc_1.1.22-1+deb8u1.dsc e169b2cf9ae4674f9b4d446e92234e0f7075ded6 616830 viewvc_1.1.22.orig.tar.gz 3fc7f35694764514b457a6dc09bc4d12bf001b69 19620 viewvc_1.1.22-1+deb8u1.debian.tar.xz 25613ee2c74c163691dafaa435d750064c0b4e43 533996 viewvc_1.1.22-1+deb8u1_all.deb 1bf22690391914a07b072ee80fc0d3c7e58f07e2 11952 viewvc-query_1.1.22-1+deb8u1_all.deb Checksums-Sha256: dc46c9c7ae3107aee195f4d5384ecef5abdcf1ec3b7a0bd2870886e334ac740b 2010 viewvc_1.1.22-1+deb8u1.dsc e41fde0088b3f4bad5cbe29cc0cfebf30c8dbe888bc1e818910d7a47174b59fa 616830 viewvc_1.1.22.orig.tar.gz c23bcf20ae6dc109ee9852e21c6f7d5f4462d636292d0ebcf996afb3744955e8 19620 viewvc_1.1.22-1+deb8u1.debian.tar.xz 42c03c113d50c9ed9b2c9c09b6a486e9f9c1ab1c9b7b7a3b67155638dfbac7b5 533996 viewvc_1.1.22-1+deb8u1_all.deb fd4c8cc03d12cbbf29482c083db9dc5e373d3301818d785cdf6414cce48e43c2 11952 viewvc-query_1.1.22-1+deb8u1_all.deb Files: 0bdd2957bd88c47672408545630e0c8e 2010 vcs optional viewvc_1.1.22-1+deb8u1.dsc 6d0a4dcf572958463ca66e0fcc2764c9 616830 vcs optional viewvc_1.1.22.orig.tar.gz 0f129b36d05197fbe48662d46a0a30da 19620 vcs optional viewvc_1.1.22-1+deb8u1.debian.tar.xz 5c2aa40e5de3f1cff56b4f28a45e7676 533996 vcs optional viewvc_1.1.22-1+deb8u1_all.deb d4d7d78924f6885032a16c36ebeb95de 11952 vcs optional viewvc-query_1.1.22-1+deb8u1_all.deb -----BEGIN PGP SIGNATURE----- iQJHBAEBCgAxFiEE3mumcdV9mwCc9oZQXudu4gIW0qUFAlicIcATHGRvZ3NsZWdA ZGViaWFuLm9yZwAKCRBe527iAhbSpcQJD/4451s0ql1G0UrdZB5tWQqItOxd1ZU2 csokwnw4VQD3WLi4spbFIIWPwHK3oJV/pDv1tl/QkKk7/z511KuD2q+t/wYtDBs9 +OBCW4P2kOyGBC9BvYxCt88bN3q3dBBUeTJRKWJ3Fc3MdtSmUfxmcbjqhJKDJIb7 TlrQD3zXUG3eRouNgGRyKxcVzSlI69o/gisDBpk3llQ74o/uimLj8m9FCizVRYkh thRjge/nZmwFaBsI+xQ/WnSMY+YD1ZsZaQx2ZqylOYlCtuXW3YOEM2lH3E+vVS/d luW2//zkV0HTewhjTC3l9LEVJCbbHif/YD4QWAKM9YLAVBXcZsmCOA7FgKUQ6Alm qEUHyjUaQ1SNMI/cymQJDFxTbxDIFWlosJFZw4eLFnfYMoF0M8yrrhEKNx+Z4mLH fd9JVbmx3fyIeDmSC7/+3tbLEYS35i1rcrFjmsEJwZGLxFHrgvU4snhI6HyNefFE 4MX1NsF9HDvRdtnQKzr8DRPq3IGvE0gGB7yRWmBJrlKNZG6tSh7buIVS9ynPfyU9 x7ypEy+FtxT2V9PqOIKFt0jl41BQXbaRPwYl96A5Oa/NiHs2uBgKoF1HDUjbi6aD Xc/wQzcwkhMet4d5OkFyExQh8UsWxMrtGgcULYzAlmzr0bHIVn1UNf3MR5xyFYNg kctxfndLEkhlrg== =NTcO -----END PGP SIGNATURE-----