Thijs, adding you to Cc in case you didn't see this. If you can't send the DLA say so and somebody will take care of it.
Thanks, Emilio On 11/04/18 22:12, Antoine Beaupré wrote: > Did you forget to issue a DLA for this one? I see the package is not > claimed in dla-needed.txt either... > > a. > > On 2018-04-11 18:23:46, Thijs Kinkhorst wrote: > Format: 1.8 > Date: Wed, 11 Apr 2018 13:24:23 +0200 > Source: squirrelmail > Binary: squirrelmail > Architecture: source all > Version: 2:1.4.23~svn20120406-2+deb7u2 > Distribution: wheezy-security > Urgency: high > Maintainer: Jeroen van Wolffelaar <jer...@wolffelaar.nl> > Changed-By: Thijs Kinkhorst <th...@debian.org> > Description: > squirrelmail - Webmail for nuts > Closes: 893202 > Changes: > squirrelmail (2:1.4.23~svn20120406-2+deb7u2) wheezy-security; urgency=high > . > * Path traversal vulnerability (CVE-2018-8741) > Directory traversal flaw in Deliver.class.php can allow a remote > attacker to retrieve or delete arbitrary files. (Closes: #893202) > Checksums-Sha1: > f922ec47972a3a6281374af9f2f2c007ac1b815b 1673 > squirrelmail_1.4.23~svn20120406-2+deb7u2.dsc > 2b406c312e8650c092c6fdb3aaa770da3fe44e7b 40065 > squirrelmail_1.4.23~svn20120406-2+deb7u2.debian.tar.gz > 4255b987b44dd1088fd1a0d444d928aaae2415be 644190 > squirrelmail_1.4.23~svn20120406-2+deb7u2_all.deb > Checksums-Sha256: > 8400ba54f905e8e6d58682362a4948865b68436d2c6e362d0709981ccf4752a6 1673 > squirrelmail_1.4.23~svn20120406-2+deb7u2.dsc > 8d6983edbbc566654e74d541c7d99e028ea9abab18babada166c0e2a026e18f8 40065 > squirrelmail_1.4.23~svn20120406-2+deb7u2.debian.tar.gz > c68ade218517d455b2d6a5df9521de39fe646268eda09749fedcab93547326f4 644190 > squirrelmail_1.4.23~svn20120406-2+deb7u2_all.deb > Files: > e1154fe67bb006221eab16ae82ac201b 1673 web optional > squirrelmail_1.4.23~svn20120406-2+deb7u2.dsc > d39330150cebf157e28e24a6bb6ea4ab 40065 web optional > squirrelmail_1.4.23~svn20120406-2+deb7u2.debian.tar.gz > 7000baeefe4ac237ff1d7772eade3295 644190 web optional > squirrelmail_1.4.23~svn20120406-2+deb7u2_all.deb > >
