-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 26 Feb 2017 20:31:13 +0100 Source: slixmpp Binary: python3-slixmpp python3-slixmpp-lib python-slixmpp-doc Architecture: source Version: 1.2.2-1.1 Distribution: unstable Urgency: medium Maintainer: Tanguy Ortolo <tanguy+debian@ortolo.eu> Changed-By: Markus Koschany <apo@debian.org> Description: python-slixmpp-doc - Threadless, event-based XMPP Python library (documentation) python3-slixmpp - Threadless, event-based XMPP Python 3 library python3-slixmpp-lib - Threadless, event-based XMPP Python 3 library (optional binary mo Closes: 854740 Changes: slixmpp (1.2.2-1.1) unstable; urgency=medium . * Non-maintainer upload. * Fix CVE-2017-5591: An incorrect implementation of XEP-0280: Message Carbons in slixmpp allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. (Closes: #854740) Checksums-Sha1: 46b3e2f43e47932490b3f1a00b03a88dc540fe80 2252 slixmpp_1.2.2-1.1.dsc 6dafb322b6815acac3e0d95b9a4988908c6d7aed 8452 slixmpp_1.2.2-1.1.debian.tar.xz b8e9f3a121fae2278e93bfe0df4db3157ee77ebb 6942 slixmpp_1.2.2-1.1_amd64.buildinfo Checksums-Sha256: 9c111c793ebac871e8591bca087aad16f3d60e372f0bfe5dc2bc0c5f1a134e16 2252 slixmpp_1.2.2-1.1.dsc 1c3c0bf4ed0772df23dabcba00e61fc50871ba64cf25372fc7aa59d9582c02a9 8452 slixmpp_1.2.2-1.1.debian.tar.xz 50d2e0ff43742f677d773e7a4d899e8db73b74b665e8ed5fbe1ab637d4844588 6942 slixmpp_1.2.2-1.1_amd64.buildinfo Files: cedb1677faf8d2cca88e79f4a2db7029 2252 python optional slixmpp_1.2.2-1.1.dsc a3cc21b7eab8436d0699b1c7cafca776 8452 python optional slixmpp_1.2.2-1.1.debian.tar.xz ed65e3223d6c7d36832ee779c163a668 6942 python optional slixmpp_1.2.2-1.1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAlizMMFfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1HkbqMP/3MjcdbCmht4c8/acYslXzAVyEygGbTiUpyW QngqTVaHxWoogsGLMMeMqJVJjVEukL/9liIVBxRaGByGKwIMqbLM9jNG6+zuva7k ergCoSvcksnsBrA9St5ovKPax2UBGxb1JDD4wUq0/JkhRHPvS6D2qT4rn0JU25Jz m/30NsommR4VEQJW7YvBHwxFRkPBflJE4F58vwrrYQoBQgdSH1f5LQhg7/2CRMri XwBaNEDkjqhBQObOySr69/MDKq3EonzXYxU/TI4PhxPGCHSmXIZSoIWkQ0E4zlNC pHuM4AjksP8Glbs7YP+AX26xFV6C1ikR2nNWnXIpeb5Ic/kM0dg1HPh2qfFJMAyx xYjBqkGP8BQGN9FugWghmx2sbuBz5kn3LxRSF/T2pZHL0IV9cRC6ekRZz9NoNKj8 ODQjFsl1Y9fPM1KObsouxXKp3NFZtuTRdLGBEm1oI0T4xMEggiQc/cBDAYu9a4OC MC21YRGh30hiPG17cDSoHmDn4L4rvsUIYGfU5nhZk/eEYKy3RMzy51O3rcM/0s0G OuGKqU7pDcffJ8aJCDoNr9aDpVEL9XTWlvqhb3hNUJKEb0NNJBjQp/H4+tNnA2Pz otBAEn/I5AlCDUiZOw19xM47wcfXGBYkIDmRYhTwdtlyFyzXqxU1tLzRrZDw7rX2 yv5Sm5UI =0OGy -----END PGP SIGNATURE-----
