News for package spip

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 3.0 (quilt)
Source: spip
Binary: spip
Architecture: all
Version: 2.1.17-1+deb7u2
Maintainer: SPIP packaging team <[email protected]>
Uploaders: Romain Beauxis <[email protected]>, David Prévot <[email protected]>
Homepage: http://www.spip.net/
Standards-Version: 3.9.3
Vcs-Browser: http://anonscm.debian.org/viewvc/spip/trunk/
Vcs-Svn: svn://svn.debian.org/svn/spip/trunk
Build-Depends: debhelper (>= 7.0.50~), po-debconf
Package-List: 
 spip deb web extra
Checksums-Sha1: 
 1ffa6bd54ef948a46013eac44abfe83de6407a8b 3943630 spip_2.1.17.orig.tar.gz
 7e047306a1ac26b0014d40046775405e9134867d 64247 spip_2.1.17-1+deb7u2.debian.tar.gz
Checksums-Sha256: 
 85561b476df35597944eff9d6cab02ed04014c61a06737f67c6b8233e45e257b 3943630 spip_2.1.17.orig.tar.gz
 5f5d261d86b615787bb81057158b13d50700391a686064c0151f4768a11f93d7 64247 spip_2.1.17-1+deb7u2.debian.tar.gz
Files: 
 1962bd0e543eabbddd60d045f8aab6ba 3943630 spip_2.1.17.orig.tar.gz
 ebb8a5e580c6647a64a11384e2bfdb49 64247 spip_2.1.17-1+deb7u2.debian.tar.gz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAEBAgAGBQJSez5fAAoJEL97/wQC1SS+nx0H/jrNFDjC4MIG/Z0VLogVBErs
RjBqzuj4EhjE/MLwx2ZBl9xtecaOcSU2ZKMD7yNusXxFwWDxKE0TKDMlSGTYWq5x
aqdxIfTokF6Nu461aHFeZaKoT9qIm5F1gq8PZtj4Jl5M6Gfj4j0ZQzgB8jhd+7Ob
2hqYL7uqEGgFYHi5NlcHB9lv8dGjzye3/bXDDvdt9X3NEd5TwbrUVzo9FcmoipBp
aIYjMnS0K+3Nx1acwMno9qmyE2pgTeEyG94+/esTOTZtOQA282d1V+mVKRN1Qczc
wKGMgiTwXqIQoth+klj+ghvnlKsJmArGeOD3ATKLugjyyv82tJk+ZHSXGIPflQA=
=Pmob
-----END PGP SIGNATURE-----

Changes:
spip (2.1.17-1+deb7u2) wheezy-security; urgency=high

  * Fix upstream version in previous changelog entry
  * Backport patches from 2.1.24
    - Fix CSRF on logout
    - Fix XSS on author page
  * Update security screen to 1.1.8
    - Avoid PHP injection in $connect
  * Update displayed version

 -- David Prévot <[email protected]>  Sat, 02 Nov 2013 13:02:57 -0400