-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 22 May 2011 17:04:41 +0000 Source: citadel Binary: citadel-server citadel-suite citadel-common citadel-mta citadel-client citadel-doc Architecture: i386 Version: 7.37-8+lenny1 Distribution: lenny-security Urgency: high Maintainer: i386 Build Daemon (murphy) Changed-By: Nico Golde Description: citadel-client - complete and feature-rich groupware server (command line client) citadel-common - complete and feature-rich groupware server citadel-doc - complete and feature-rich groupware server (documentation) citadel-mta - complete and feature-rich groupware server (mail transport agent) citadel-server - complete and feature-rich groupware server citadel-suite - complete and feature-rich groupware server; metapackage for full Changes: citadel (7.37-8+lenny1) oldstable-security; urgency=high . * Non-maintainer upload by the Security Team. * Fix billion laughs DoS attack vector against xmpp component by completely disabling entity expansion (CVE-2011-1756). Checksums-Sha1: 0de5e4edcbe31ce829be095fd6cef67e6b7f37d0 547840 citadel-server_7.37-8+lenny1_i386.deb 49266e4642a5dd28b0907cebe7bf5789c2170a3d 16246 citadel-mta_7.37-8+lenny1_i386.deb a49293db13369cae3e4c1f4aad08815863d9e92c 115032 citadel-client_7.37-8+lenny1_i386.deb Checksums-Sha256: 7aa1d98d99444d2067ec1a99bd7a0f421c14dc241756e2ef6fcd27a09d81a77e 547840 citadel-server_7.37-8+lenny1_i386.deb 11a87782b8c30f10de6dc1f7e41a782ccb5c5e9b05b1d3a5fe67f8f44ecc4b64 16246 citadel-mta_7.37-8+lenny1_i386.deb ca1b371a4954cf02752f314e27fca347efc9b05302bb3c230ff757a9d0635965 115032 citadel-client_7.37-8+lenny1_i386.deb Files: dd2bd68dca7cfd0745f185c191a85eea 547840 mail extra citadel-server_7.37-8+lenny1_i386.deb 7b92488391008d2a1d4f8cc27ca8f2d6 16246 mail extra citadel-mta_7.37-8+lenny1_i386.deb 9ae5793857cdce655f0bd89b895fd21a 115032 mail extra citadel-client_7.37-8+lenny1_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBCAAGBQJN2UnIAAoJEFc2rhMcPx5eZNAP/2NmfFbIBIWQIt7IfBaOKxFk Uje6KepG/qbujpQgW8cm9gDpZhtT8Q2LLsaSYQRv9UQZJtxjW/EndqHmPfZykBFE X+kjnpB9CmOLkGbRtozY1fQeheTZkrYlVHt4ejpVzi6w0+dkwmhp/XIVU+B8eS46 OrSdzMkzZUCakBLBYIUrEpM7jpmxsrpy7YbnufMc99muVCd65lyvNpjvspzGJavR UURX1cZ+6CFiWCDeIVGSocv4DVKfEVdAEXuOPRXHNVJlIPNlrmEfYOEK1K/xnNFf oVFDEHqOZaDW/opezW2j18aBuimcI80aiod4OUgzl6htsDzFzWnklYjWDrgQPDUO T5qmtocgncw6I5RI+kEZWvenscU/+MLIimtD1DRblvRvIRbS9whCfpw7wa7AeQtg atjcMPCDecGf9uNAUi2xPZ/7nIgJN41h86z3moWa/WMiM4dkG4SIdSOMAGKLlf7e q3ju/yBRTEWMSToPjLcDN6khCBatoR0Fe1HzHz97gOESyJCmzu1jzE3fAQA5/KsD 0ybuU0m9+trWopM2mSZgLl0S51qyGj0txDgPfu12Okbbph9J5VgNl1VYcXMxHh+F gNukiw7zD0TM+29H36JH3H1LmqPZogItRWOz4jjLk1eob/FqPEs2rErQHr/vXhAU lpMTnZ5CfqvNxAH5U3rI =hfbs -----END PGP SIGNATURE-----