-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Sat, 16 Dec 2006 22:30:44 -0800
Source: torrentflux
Binary: torrentflux
Architecture: source all
Version: 2.1-7
Distribution: unstable
Urgency: high
Maintainer: Cameron Dale <[EMAIL PROTECTED]>
Changed-By: Cameron Dale <[EMAIL PROTECTED]>
Description:
torrentflux - web based, feature-rich BitTorrent download manager
Closes: 400582
Changes:
torrentflux (2.1-7) unstable; urgency=high
.
* Add more security fixes (Closes: #400582)
- some missed previously (11_missed_security_fixes.dpatch)
- remote command execution in metaInfo.php, issue
CVE-2006-6331 (12_metaInfo_remote_command.dpatch)
- possible XSS vulnerability due to urldecode
(13_possible_xss_vulnerability.dpatch)
- remote command execution in maketorrent.php,
(14_maketorrent_remote_command.dpatch)
- more possible fixes just to be safe
(15_additional_possible_fixes.dpatch)
Files:
c2007ff877e2e72df2bdd88ab714e3a1 629 web optional torrentflux_2.1-7.dsc
7c7e9f51d756bc1109fa0b09a4c588a1 40257 web optional torrentflux_2.1-7.diff.gz
81f96bd4ffb1d4a850b2c2fb943d66ae 426224 web optional torrentflux_2.1-7_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFFheHN9n4qXRzy1ioRAkKLAJwNbg5zaSUV1BsMX1YZkqdIlTGNTACgkSYC
bV0eeXEaxbZrXrtnM8xOLRw=
=95pw
-----END PGP SIGNATURE-----
Accepted:
torrentflux_2.1-7.diff.gz
to pool/main/t/torrentflux/torrentflux_2.1-7.diff.gz
torrentflux_2.1-7.dsc
to pool/main/t/torrentflux/torrentflux_2.1-7.dsc
torrentflux_2.1-7_all.deb
to pool/main/t/torrentflux/torrentflux_2.1-7_all.deb
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
