-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 30 May 2017 19:43:30 +0200 Source: gajim Binary: gajim Architecture: source all Version: 0.15.1-4.1+deb7u3 Distribution: wheezy-security Urgency: medium Maintainer: Yann Leboulanger <asterix@lagaule.org> Changed-By: Emilio Pozuelo Monfort <pochu@debian.org> Description: gajim - Jabber client written in PyGTK Closes: 863445 Changes: gajim (0.15.1-4.1+deb7u3) wheezy-security; urgency=medium . * Non-maintainer upload by the LTS team. * CVE-2016-10376: disable XEP-0146 remote commands by default, as they can be triggered by malicious servers to retrieve plain text logs from encrypted sessions. Closes: #863445. Checksums-Sha1: 6e1cd30af1c45bd8f9406964b9021cf67a5d5402 1874 gajim_0.15.1-4.1+deb7u3.dsc be92561d13bc9b39a49a382353c6c8070e4a5264 5982457 gajim_0.15.1.orig.tar.gz 2f87ac061b3c160752c7f551cab7bfbf6317ddfc 10691 gajim_0.15.1-4.1+deb7u3.diff.gz a14ede73a0f6527d7f6bd6e6d41295d0422b7796 4824476 gajim_0.15.1-4.1+deb7u3_all.deb Checksums-Sha256: 1a998b72c4c62f9c80edf91dcfabb8e4bc94f814be6df23f51fee1ac8ef58e96 1874 gajim_0.15.1-4.1+deb7u3.dsc b315d4a600da0c5f8248e8f887a41ce2630c49995b36cbad8fb2cd81cc8d2e8b 5982457 gajim_0.15.1.orig.tar.gz 19618611b3c5e0b14724cc3c02b36ca6e1a0772e3ba1daee6b240a6f85380d4e 10691 gajim_0.15.1-4.1+deb7u3.diff.gz 38346afd6f85043b7fddd7360379c49e69f328e7b09732cd5f1dfa42530470e8 4824476 gajim_0.15.1-4.1+deb7u3_all.deb Files: 3c0e136b3a2a14409c4c09bf97ea66a8 1874 net optional gajim_0.15.1-4.1+deb7u3.dsc 8dcbe90de03ef9793e108342cc250595 5982457 net optional gajim_0.15.1.orig.tar.gz ec310e1849f162acb281b2e274c232dd 10691 net optional gajim_0.15.1-4.1+deb7u3.diff.gz 8af889dc28e7397e9646a57b0b3d1224 4824476 net optional gajim_0.15.1-4.1+deb7u3_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEcJymx+vmJZxd92Q+nUbEiOQ2gwIFAlkttDYACgkQnUbEiOQ2 gwII2g//YA/TzwvoJ4sRssvqYm/kIgeAqDFYCYcNAd4LKmBdR2ubIw4szDX5Kofo 1laVnV+ros70v/IolhVpYUGRoGSdrIoEVjQ0fHNzVHOsZau5ALw1hjNJnbnNhS+M KzEAILXyCgcflm8JIes59tX1dq0O4wcJAKAEf8M0Ex9VZ775a2HwJzU9W5zGasq2 ksMq/HIQb7OIAc1kXN3BnpmiXJ8zR+qeXuxhbNqlGe3kZES01vDdEpC48X5NCXXL 1AnRMjnORMC2UiXujqpLag3WQQDv8lqB19MBl4goOzyozIcBf8OBCebKtr/a7f+n yvlAGAgEPHhqfLkgC2KCq+ViZHrrEHB+xFAtMNbAwArQ4LOBGYKD2/7IQiJV0ehd kpIBJLZwPmkEhp8MRRcJXSjEQWeWAhY4DJ9A68ey+ZY8tWBy5XCfTH732CIGSAgB uHp5nASlzdWfDN7Xn2AjXHRmDAbYJCIwfjE5/9dRhY+a2QvvTrcbGuT4XLG2aoAt 5D1urvK5Uj2Bw213SgVs3pAMQKb9MCzM3LFCDLj6l2pe2xAIM3YuMR3pLOlTJxK/ B9tNSmXdXsBAViqx/76kmnfSAI9fI2lPoa4wfbG+iDVWm4Z5oMkuFXNTABfOVwmW JaqLluBb6q8IHKD6TJoEt5+4VTX+5FBgpOHYVgdd8qNq0039j/U= =o4tz -----END PGP SIGNATURE-----