Ubuntu Archive Auto-Sync katie at jackass.ubuntu.com
Mon Oct 24 21:45:22 CDT 2005


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Origin: Debian/unstable
Format: 1.7
Date: Tue,  25 Oct 2005 02:03:32 +0100
Source: cgiwrap
Binary: php-cgiwrap, cgiwrap
Architecture: source
Version: 3.9-3.1
Distribution: dapper
Urgency: high
Maintainer: Pierre Machard <pmachard at debian.org>
Changed-By: Ubuntu Archive Auto-Sync <katie at jackass.ubuntu.com>
Description: 
 cgiwrap    - allows ordinary users to run their own CGI scripts 
Closes: 316881 316901
Changes: 
 cgiwrap (3.9-3.1) unstable; urgency=high
 .
   * Non-maintainer upload
     - Fixes security bugs
       Minimum UID now includes all system users (closes: #316881)
       CGIs can be used to disclose system information (closes: #316901)
       + Do not generate verbose messages which might be used to disclose
         valid usernames.
       + Do not install the debugging CGI invocations as they might provide
         sensitive server information. (compiled using --without-cgiwrapd)
Files: 
 aa8168cff6134cdf7f1fba8ab31b30ea 43409 web optional cgiwrap_3.9-3.1.diff.gz
 cfb2b064ae7f29ea3695c6b86292f385 576 web optional cgiwrap_3.9-3.1.dsc
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iQEVAwUBQ12EZAF4adwMEr3XAQIWQwf7B837AHZEmaVKjSZLSAstLAao0d53ClJF
eu/JsYjR4Gvz61asEYO+CtkbDmeevoO0lFWTA0rt1YJbnxR/f/Aj5VKgYXjWKw9f
GP2Y5mVbl9J+4Azu8SRq6DPhn1z6is7Kd+Q3dEkw6SCYVbCNRRVzVZ8T03FT8qB4
E7g8pa1EsqbyQPHZTD/5a7z2ULtLxGyG1JlMWvodRp2YNt0FPmW/e+V/5m4DAAHh
IzC7oqGB3dQJq4XJ++Gz93qB/e+G4ADrKDnOqhA40Fjubtg+CX2b6skHM4Lmz/0m
Lr3+1Pgg5RbJjyGuP4zrJmA2tg+QJMP9byaGdiRbW6T9jL6EbKMF9w==
=51Ui
-----END PGP SIGNATURE-----


Accepted:
cgiwrap_3.9-3.1.diff.gz
  to pool/universe/c/cgiwrap/cgiwrap_3.9-3.1.diff.gz
cgiwrap_3.9-3.1.dsc
  to pool/universe/c/cgiwrap/cgiwrap_3.9-3.1.dsc




More information about the ubuntu-changes-auto mailing list