Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.changes > #5274

Accepted jackrabbit 2.3.6-1+deb8u2 (source all) into proposed-updates->stable-new, proposed-updates

Path csiph.com!news.mixmin.net!aioe.org!gothmog.csi.it!bofh.it!news.nic.it!robomod
From Markus Koschany <apo@debian.org>
Newsgroups linux.debian.changes
Subject Accepted jackrabbit 2.3.6-1+deb8u2 (source all) into proposed-updates->stable-new, proposed-updates
Date Tue, 04 Oct 2016 00:10:02 +0200
Message-ID <sojAS-2da-21@gated-at.bofh.it> (permalink)
X-Mailbox-Line From debian-changes-request@lists.debian.org Mon Oct 3 22:03:46 2016
Old-Return-Path <envelope@ftp-master.debian.org>
X-Spam-Flag NO
X-Spam-Score -16.279
X-Dak dak process-policy
X-Debian DAK
X-Debian-Package jackrabbit
MIME-Version 1.0
Content-Type text/plain; charset="utf-8"
Content-Transfer-Encoding 8bit
X-Debian-Message from DAK
Reply-To debian-devel@lists.debian.org
Mail-Followup-To debian-devel@lists.debian.org
X-Mailing-List <debian-changes@lists.debian.org> archive/latest/9694
List-ID <debian-changes.lists.debian.org>
List-URL <https://lists.debian.org/debian-changes/>
List-Archive https://lists.debian.org/msgid-search/E1brBKj-0007cZ-4P@franck.debian.org
Approved robomod@news.nic.it
Lines 55
Organization linux.* mail to news gateway
Sender robomod@news.nic.it
X-Original-Date Mon, 03 Oct 2016 22:03:37 +0000
X-Original-Message-ID <E1brBKj-0007cZ-4P@franck.debian.org>
Xref csiph.com linux.debian.changes:5274

Show key headers only | View raw


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 26 Sep 2016 20:05:38 +0200
Source: jackrabbit
Binary: libjackrabbit-java
Architecture: source all
Version: 2.3.6-1+deb8u2
Distribution: jessie-security
Urgency: high
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Description:
 libjackrabbit-java - content repository implementation (JCR API)
Changes:
 jackrabbit (2.3.6-1+deb8u2) jessie-security; urgency=high
 .
   * Team upload.
   * Fix CVE-2016-6801:
     The CSRF content-type check for POST requests did not handle missing
     Content-Type header fields, nor variations in field values with respect to
     upper/lower case or optional parameters. This could be exploited to create
     a resource via CSRF.
Checksums-Sha1:
 95b58cbdb45924a39f9da2bb4d2b494af6756de7 2262 jackrabbit_2.3.6-1+deb8u2.dsc
 1eee828d7b7dee73d9d7b2c54b7672189c4bfeb2 11092 jackrabbit_2.3.6-1+deb8u2.debian.tar.xz
 95b3501306adb84fb78970f36991147b5346f8d1 275980 libjackrabbit-java_2.3.6-1+deb8u2_all.deb
Checksums-Sha256:
 4de2ed0ac7cef5e46e37cc60133ae3184387434f210673bb6a80c146f67fd83d 2262 jackrabbit_2.3.6-1+deb8u2.dsc
 ca9144ec0b5c68697f13312622a7c365a2f8b49442d455896d28a6b81a1c7448 11092 jackrabbit_2.3.6-1+deb8u2.debian.tar.xz
 a13bf155f7fd18fb2f20497556cef6e12c5937bfbd9406b9f8f9c3d85572fb6a 275980 libjackrabbit-java_2.3.6-1+deb8u2_all.deb
Files:
 9cbacbf04ad59521863486d38073c895 2262 java optional jackrabbit_2.3.6-1+deb8u2.dsc
 843597a3f9bdb1ab07fabb3a2720c6a3 11092 java optional jackrabbit_2.3.6-1+deb8u2.debian.tar.xz
 c786ac04b0495d577b618c412fe89046 275980 java optional libjackrabbit-java_2.3.6-1+deb8u2_all.deb

-----BEGIN PGP SIGNATURE-----
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=OR8C
-----END PGP SIGNATURE-----

Back to linux.debian.changes | Previous | Next | Find similar | Unroll thread


Thread

Accepted jackrabbit 2.3.6-1+deb8u2 (source all) into proposed-updates->stable-new, proposed-updates Markus Koschany <apo@debian.org> - 2016-10-04 00:10 +0200

csiph-web