-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 3.0 (quilt) Source: libplack-perl Binary: libplack-perl Architecture: all Version: 0.9989-1+deb7u1 Maintainer: Debian Perl Group <[email protected]> Uploaders: Jonathan Yu <[email protected]>, gregor herrmann <[email protected]>, Iñigo Tejedor Arrondo <[email protected]>, Krzysztof Krzyżaniak (eloy) <[email protected]>, Alessandro Ghedini <[email protected]>, Maximilian Gass <[email protected]> Homepage: http://search.cpan.org/dist/Plack/ Standards-Version: 3.9.3 Vcs-Browser: http://anonscm.debian.org/gitweb/?p=pkg-perl/packages/libplack-perl.git Vcs-Git: git://git.debian.org/pkg-perl/packages/libplack-perl.git Build-Depends: debhelper (>= 8) Build-Depends-Indep: perl (>= 5.10.1), libauthen-simple-passwd-perl, libcgi-compile-perl, libcgi-emulate-psgi-perl, libdevel-stacktrace-ashtml-perl (>= 0.11), libdevel-stacktrace-perl (>= 1.2300), libfcgi-perl, libfcgi-procmanager-perl, libfile-sharedir-perl (>= 1.00), libfilesys-notify-simple-perl, libhash-multivalue-perl, libhttp-body-perl (>= 1.06), libhttp-message-perl, libhttp-request-ascgi-perl, libhttp-server-simple-psgi-perl, libio-handle-util-perl, liblog-dispatch-array-perl, liblog-log4perl-perl, libmime-types-perl, libmodule-refresh-perl, libtest-requires-perl, libtest-tcp-perl, libtry-tiny-perl, liburi-perl (>= 1.58), libwww-perl (>= 5.814), python Package-List: libplack-perl deb perl optional Checksums-Sha1: d640e237ab90520bcaf5f46e09051def3517b8a3 235848 libplack-perl_0.9989.orig.tar.gz 42eddef1e46796580757003cb78342359b74d9b7 6246 libplack-perl_0.9989-1+deb7u1.debian.tar.gz Checksums-Sha256: d9d3d1d1a23636864851f290bc0a926ed54524dd793527432f0197abd5932b38 235848 libplack-perl_0.9989.orig.tar.gz 1580ecdfd999525da758771fd19c4b9584270a9332ac7b7ad570382116a7c450 6246 libplack-perl_0.9989-1+deb7u1.debian.tar.gz Files: 35a19f40e3292197c66d0ba24c5306d5 235848 libplack-perl_0.9989.orig.tar.gz 257aff7bb7e7e8d9c35d876f60cc8666 6246 libplack-perl_0.9989-1+deb7u1.debian.tar.gz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQJ8BAEBCgBmBQJUNp+7XxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXREMUUxMzE2RTkzQTc2MEE4MTA0RDg1RkFC QjNBNjgwMTg2NDlBQTA2AAoJELs6aAGGSaoGW68P/R0MmaXVVH64qf/BPM9xmQf2 DlBB/WsS/iKKydXD8pS+ekQvMbZs8O2OQV5HxK5isLbW82vcwJ+UMFPjKZWrDEah AcN0asn5Sue/1b0ZMo6eN9+vJyNU+2ju5sdxag2ET2KKK1RMtZBGWRDQdoj3Bkad c7Ae8OEGf9d1ZvelwJzpGKnO7kTEX43MfvikfHb7Ae0OyCE1ds5shtyS+0a8GJKC 1SMvOc6b8XNfamQZMHTrDl8G7QT5mg+uDQ+E8uoBZW3fuM49oXd2arlPYhG7KfQm glIfi5ifYjUh+XOrqOU2JgDEbxJMh+Q2tdbspcpiqmcX2hWxLYzjzx4zpBZx7zCV hqubgTPqka2mpRf0BE3xyNxa8f3NJc/wuCMZwo1Y9JurtFeYVF9YksF8ZqkHefYy UYgz+JevlGPT2K1wMeU+i6UU4sAzAKytVUW4XIzkUYWSX0+R0C8eKL0baULz4+UD ZShtzhG5ZB1bNIRLZp43qngyPwsZ8vpCJ7Pe1FyS1Gs3OyxfIYG0JNH7kUSnYaJ4 HDB9kn3zPV5f/W3K8Ng6u/puFDYQ7r2GzStG1uju4nH/NAjuU524HIYu5gLC5Hi/ teBQGTtk6a2ugSjvAlBwauv3X0OkmumKX0Cvkg86dhr2PR5lvfncxEyfA9GRSxqa x9We1VakTmbljA0lVB+e =tCVw -----END PGP SIGNATURE----- Changes: libplack-perl (0.9989-1+deb7u1) wheezy; urgency=medium * Include bc1731d from 1.0031 release to fix CVE-2014-5269. Plack::App::File would previously strip trailing slashes off provided paths. This could under specific circumstances lead to the unintended delivery of files. For details see the pull request message preserved in debian/patches/01-fix-CVE-2014-5269.patch. -- gregor herrmann <[email protected]> Thu, 09 Oct 2014 16:45:26 +0200
