it-securitynotifies AT lists.piratenpartei.de
Betreff: Sicherheitsankündigungen
Listenarchiv
- From: Sebastien Delafond <seb AT debian.org>
- To: debian-security-announce AT lists.debian.org
- Subject: [IT-SecNots] [SECURITY] [DSA 5367-1] spip security update
- Date: Thu, 02 Mar 2023 06:19:59 +0000
- Authentication-results: mail.piratenpartei.de; dkim=none; spf=none (mail.piratenpartei.de: domain of "bounce-debian-security-announce=it-securitynotifies=lists.piratenpartei.de AT lists.debian.org" has no SPF policy when checking 2001:41b8:202:deb:216:36ff:fe40:4002) smtp.mailfrom="bounce-debian-security-announce=it-securitynotifies=lists.piratenpartei.de AT lists.debian.org"; dmarc=none
- List-archive: https://lists.debian.org/msgid-search/E1pXcIJ-00D5ZS-QL AT seger.debian.org
- List-id: <debian-security-announce.lists.debian.org>
- List-url: <http://lists.debian.org/debian-security-announce/>
- Old-dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debian.org; s=smtpauto.seger; h=Date:Message-Id:Subject:To:From:Reply-To:Cc:MIME-Version: Content-Type:Content-Transfer-Encoding:Content-ID:Content-Description: In-Reply-To:References; bh=TZNOuPNI8OybkN8wfU37ist8Ezj+hJVoraoT/LPtj7A=; b=gv QZgK3IuZ6FjmyK26Vzw5/ULJNhouhwtdpb4grzUbf9kEKM3tpIX7HOErHQcTo0/1yJ04C8ky6h7S3 OeaWb0fYfT89KtttHj+6Lqft/AHQeS32wKBkPWdp/URue1JfnKq4elpId13Pyb+gFi50o3uQtymyP e1jkALGmjlKBTHlSBNB4xJRWIs6aA2rUbWGQ8VgxL8ncjuKYiM/cCNwO3DailPun0P9dJ/iZkHwQK CvBme6OG9EwzZgvNjFur2xDdEkv1pZnP+ZbksqB/Bv5XGAp3CZxe6zsgo0a1OX0pPj456vBIk409l QoYbhd0SQwl6G2+8TW/toUrX+ytJgSjg==;
- Old-return-path: <seb AT seger.debian.org>
- Priority: urgent
- Resent-date: Thu, 2 Mar 2023 06:20:27 +0000 (UTC)
- Resent-from: debian-security-announce AT lists.debian.org
- Resent-message-id: <qd0aAE03yu.A.dME.qAEAkB@bendel>
- Resent-sender: debian-security-announce-request AT lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- -------------------------------------------------------------------------
Debian Security Advisory DSA-5367-1 security AT debian.org
https://www.debian.org/security/ Sebastien Delafond
March 02, 2023 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : spip
CVE ID : CVE-2023-27372
It was discovered that SPIP, a website engine for publishing, would
allow a malicious user to execute arbitrary code.
For the stable distribution (bullseye), this problem has been fixed in
version 3.2.11-3+deb11u7.
We recommend that you upgrade your spip packages.
For the detailed security status of spip please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/spip
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----
iQEzBAEBCgAdFiEEAqSkbVtrXP4xJMh3EL6Jg/PVnWQFAmQAP4QACgkQEL6Jg/PV
nWSHawgAm8iQlTcFT98cMImGBx8XTO70YPcgzIMK87mvmQn3NR30/dM9icfBVVu3
l9Ks2mPa0yYIT0DTeXghTclf8hnJtOM2T4buRPD6po6ZyEgX5AlwN6xaZPAkYxiz
+7GXiqYZAHAMShIZhhMr1CcIDsE093TC8dLdZFosSVtI7sylxTgbSlJl1xafhe6/
6fhI2DcDr4ov7MrkfcjCT2BY9um/pH/L2lIKTDcHahgoxGf9wcurANtwHwHQsBNR
3R5nxScH/1wTI53am6rPCYFuLGlGEcY6c2HyJPR3j3o+sUFYca+4fGNbmwuS8fOh
hOgz19DTow374IwJU1qnoZjvrbB58g==
=CcjC
-----END PGP SIGNATURE-----
- [IT-SecNots] [SECURITY] [DSA 5367-1] spip security update, Sebastien Delafond, 02.03.2023
Archiv bereitgestellt durch MHonArc 2.6.24.