-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 22 May 2011 15:25:47 +0000 Source: ejabberd Binary: ejabberd Architecture: source amd64 Version: 2.1.5-3+squeeze1 Distribution: stable-security Urgency: high Maintainer: Konstantin Khomoutov Changed-By: Nico Golde Description: ejabberd - distributed, fault-tolerant Jabber/XMPP server written in Erlang Changes: ejabberd (2.1.5-3+squeeze1) stable-security; urgency=high . * Non-maintainer upload by the Security Team. * Fix billion laughs attack DoS attack vector by disabling entity expansion completely (CVE-2011-1753.patch). Checksums-Sha1: ab4687a424c5ac68c3441fda8ef27b4354ca4c8a 1993 ejabberd_2.1.5-3+squeeze1.dsc 8966d6752219c9386f48a5b8e1f2f8fb0e7477ae 2278008 ejabberd_2.1.5.orig.tar.gz 6b29f1977874440ab6201eb603b0761ba8d05bf2 75465 ejabberd_2.1.5-3+squeeze1.diff.gz 90c2f64ee6da841f628ec52f44b805019818a6f8 1776864 ejabberd_2.1.5-3+squeeze1_amd64.deb Checksums-Sha256: 3228f18ba07aaed0cfc7630d04b2d16f964f295fbfb40fc339a31bedcb7f4cfd 1993 ejabberd_2.1.5-3+squeeze1.dsc 31a46228c6933d7c24435753300a4d2ae2e84568a6097175dc5d4e553299dd9d 2278008 ejabberd_2.1.5.orig.tar.gz d6a082eb12752ba44d66b1dbe10afc0a2269d91b6a42dd0c91c7c323d6210e56 75465 ejabberd_2.1.5-3+squeeze1.diff.gz 24bb2a8ea8dcf1cb621648f8e38fd895d87c480455cb7b2bdd25458f9829fcf7 1776864 ejabberd_2.1.5-3+squeeze1_amd64.deb Files: 0d914858e3ba4bfd2233baae23caedf4 1993 net optional ejabberd_2.1.5-3+squeeze1.dsc 2029ceca45584d704ca821a771d6d928 2278008 net optional ejabberd_2.1.5.orig.tar.gz 1e69e2fdfcb960f2ba0b41d06b23f483 75465 net optional ejabberd_2.1.5-3+squeeze1.diff.gz 6120a2f928a260ce3039ee0b20581f89 1776864 net optional ejabberd_2.1.5-3+squeeze1_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQIcBAEBCAAGBQJOjKUFAAoJEMXOXcLFQs1ZfIAP/iHRG+R7tvlRY7VD/KwqtOaI eTXyf5C5gOSRTcIk23d8U2quD2gU3G/MXwA/uK2xzpst1S7G0gbryiyZeTIa3oqx dNZ4DiHbROBoPrIxG1BTay8ZKyqSfo91yCE0AKX1d7RtBHNLAGvO3mdJU3J/bdoF NMPtqK9RTaXUaofCYyRxvDRsa7gS9lpQXJO2hNTNy7Xe6PlVN47zCauDMlni9z8Z pYHPwkY6A384li+DZ8d1say6gbVR3Jfh24AlzThfGEd9t07/humPeS21MNKpm5fJ v8RewKwSGkJlNo9dRML3EHIkA0mOw9J9Nz+5VQ/4p5yQ5zHr0X4WjZnRCHlzNiJ8 nPFt371XyLnAsL+TEcwNzoBlZ0F63PSbT/xNiNqiZh9ZFFoh9PAfrWae2oLzvrJ4 n0DuUedw23b+zPGntw5UFpzIo0oQ8gVGI97Hqp5K3cIojvu5+Wtzwl4azZsV80os 73HTCxaKMv4z/B80Jepv+8skAuv6MoTrSX89rxyXo7hUQvtWvx7f5Jmlt6ddYWFt 27wl4L7SNl5+C4WW/shJZjOk+UedY90u/7fFtCWdOQMSEyO1g9Vyd4fwzLwNBFn2 Q0lWcdapC0vEuUWs/vK7D3FegravGJDNcsadQN1A1iyR82vZoVjJbl8G5jpFAUmc kPA8H7Dkgmjpp36XztnX =8Pko -----END PGP SIGNATURE-----