-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 22 May 2011 17:04:41 +0000 Source: citadel Binary: citadel-server citadel-suite citadel-common citadel-mta citadel-client citadel-doc Architecture: alpha Version: 7.37-8+lenny1 Distribution: lenny-security Urgency: high Maintainer: Debian Build Daemon Changed-By: Nico Golde Description: citadel-client - complete and feature-rich groupware server (command line client) citadel-common - complete and feature-rich groupware server citadel-doc - complete and feature-rich groupware server (documentation) citadel-mta - complete and feature-rich groupware server (mail transport agent) citadel-server - complete and feature-rich groupware server citadel-suite - complete and feature-rich groupware server; metapackage for full Changes: citadel (7.37-8+lenny1) oldstable-security; urgency=high . * Non-maintainer upload by the Security Team. * Fix billion laughs DoS attack vector against xmpp component by completely disabling entity expansion (CVE-2011-1756). Checksums-Sha1: beccfa8161ee5a29d7b34ed4f93bacb5a3bcd875 698718 citadel-server_7.37-8+lenny1_alpha.deb b2b422c88fadb2c892c8b62d4d516c42ef017ff9 17522 citadel-mta_7.37-8+lenny1_alpha.deb d4de58a766fac11514831c7c4f7db53dcf3440aa 143604 citadel-client_7.37-8+lenny1_alpha.deb Checksums-Sha256: 29c04f1ff43fd56f463f7d4568b7bc83873fa72ad58d3f2271c37959bc6f20dd 698718 citadel-server_7.37-8+lenny1_alpha.deb 0c98575d8a9e386aad3989223fe12bfb0d3f886446ed89cdbd80e057b822855f 17522 citadel-mta_7.37-8+lenny1_alpha.deb 8c8509f7f2dc616729ada5b309cba33d3f6c539a73942783fa6c3296ad3cf5e5 143604 citadel-client_7.37-8+lenny1_alpha.deb Files: 25daea0eeffa445be51ebdfb0c68e91a 698718 mail extra citadel-server_7.37-8+lenny1_alpha.deb 21f461144b6845864c635bb2be8f5ece 17522 mail extra citadel-mta_7.37-8+lenny1_alpha.deb 318aac797a4a324476e4997d5a9405ff 143604 mail extra citadel-client_7.37-8+lenny1_alpha.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iQIcBAEBCAAGBQJN2UrBAAoJEPvr9aNn1GQhpi0QAKlsAW+iEx5zwWUxWwO388/I gscyaZFdMEaNjy90fUXWcK9FvXdracEg+/8EoeoUG8zKmufmaZIfidR49wuozLnD itvQC8dBRo3BF29x2kmp+0izA5zgC1i5ZZdcgZZHQCSYcuW57yzZOMGdFSyFudHD q1nynEUAXl1+yIi8/uomWX/6W3HkypzSrgmrqGoeb8K5WPl0MYmTxQ3EBvT1EGqU cM11Zi6803OvGd0w8iKEKgeL+FL1/tcjopVL/MOebQvbMfRLD+VZ3ujW25g4pr9o r1Zv1ulDNhLHkt7uDS62knK/TwXtelFU9mGP3dmKE9rdiXQTdhQxQA7rcT+oN5my s8dcEnqQJD+VJ5xqIe/SJ367aIQIgiXT4xeyD5/K2oEuWUzAoBiZNaC17zReoqSN lRmyC5nyjlv9DNX9cyiQoua7F3GSFKwUbVN45+paSYigG6WrBRysN6xlFnL+Lu0r kgD6OGQvfdjx8i7KesmtM1/pmoGbQRJWqT0oRnKn+F2J77zA3cmFVhxqffCYDy4M cJtci0DjpmdHJCSd4sreTHWSt7PuG/zdmjQ48ZunpcgGWJokX0P5q0Z581tOu87w O3M15ZzrJyEmbIFyYzFyfxotypzuORb3tkLXjRNnCOKFpzrDmqlKvnYURgouRZkB VnemfUfCDsfW0bv331uC =dSKb -----END PGP SIGNATURE-----