-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 17 Mar 2019 19:40:23 +0100 Source: passenger Binary: passenger libapache2-mod-passenger passenger-doc ruby-passenger ruby-passenger-doc Architecture: amd64 Version: 5.0.30-1+deb9u1 Distribution: stretch-security Urgency: high Maintainer: amd64 Build Daemon (x86-grnet-01) Changed-By: Salvatore Bonaccorso Description: libapache2-mod-passenger - Rails and Rack support for Apache2 passenger - Rails and Rack support passenger-doc - Rails and Rack support for Apache2 - Documentation ruby-passenger - transitional dummy package for passenger ruby-passenger-doc - transitional dummy package for passenger-doc Closes: 884463 921767 Changes: passenger (5.0.30-1+deb9u1) stretch-security; urgency=high . * Non-maintainer upload by the Security Team. * arbitrary file read via REVISION symlink (CVE-2017-16355) (Closes: #884463) * Fix privilege escalation in the Nginx module (CVE-2018-12029) (Closes: #921767) Checksums-Sha1: ab05130ff2d62e2876e68d3c4f71573ff62f9537 3904498 libapache2-mod-passenger-dbgsym_5.0.30-1+deb9u1_amd64.deb 64f8e9f0eca2d356cbd31608d1b48b802cb27e6d 305994 libapache2-mod-passenger_5.0.30-1+deb9u1_amd64.deb 45fefa82d7f357453c2faabf78267220105f49bd 12675506 passenger-dbgsym_5.0.30-1+deb9u1_amd64.deb 16a16b030c2186cff899d0c5320f01ce541f3140 11391 passenger_5.0.30-1+deb9u1_amd64.buildinfo da3609565c6b4ec666fb7ef311a18fa755830b14 1314108 passenger_5.0.30-1+deb9u1_amd64.deb Checksums-Sha256: aefb63366c17011c6e99d473482e06d6fee4858697793d7c41a56e0f9a7a5a17 3904498 libapache2-mod-passenger-dbgsym_5.0.30-1+deb9u1_amd64.deb 364f850c4b052eef268d78d258bf445ae06e1b581195b64a19a890e17e3f5315 305994 libapache2-mod-passenger_5.0.30-1+deb9u1_amd64.deb 5492d37fd068f07a5d11affa2b527a0bd084bf6a8830c9f2fcf5eea5644e98e1 12675506 passenger-dbgsym_5.0.30-1+deb9u1_amd64.deb 127c447b6b79458f3b378b80b7c6cdb589f6d2910f167525202b6061e5fce28e 11391 passenger_5.0.30-1+deb9u1_amd64.buildinfo eb9239307aeb3f72cdc7469cbbfdf46fa38e8ec75af41e5b986881c29eccd40f 1314108 passenger_5.0.30-1+deb9u1_amd64.deb Files: 212faa76ec108a6db8ef6b262afa8086 3904498 debug extra libapache2-mod-passenger-dbgsym_5.0.30-1+deb9u1_amd64.deb d5c8b2727f2dab78b7725114149a7a63 305994 httpd optional libapache2-mod-passenger_5.0.30-1+deb9u1_amd64.deb 5515d2911cc2793a73f013f32087e0de 12675506 debug extra passenger-dbgsym_5.0.30-1+deb9u1_amd64.deb 0aa61b691d072288cce89f7a1417e656 11391 ruby optional passenger_5.0.30-1+deb9u1_amd64.buildinfo 073a445dd515c96f82dda723cf69f506 1314108 ruby optional passenger_5.0.30-1+deb9u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE56RkdImmGnu/qTMEtnmMmMOJfQ0FAlyOrEAACgkQtnmMmMOJ fQ1y4w/7BriV5JoiTY0EIJpurVNfrhlZ6A1cIQ5+7h0Xlr1ASfet6vJEkUlN/V8p jbrhbBtjpLy5kUlx9Hp8jsJ09bRkB91FOBK1cahMZy7uldoEN3hv8x8vaO29XZOz wdpLvLSUp1gX2ifgLlqvChmquGUvDXcKQK83Y0UsWNP0KElKweviJBQisgjR7MDv pCdJ7PNKlC08n1GYp454RmsuFE++XwF2xRKyNP3/AUJEb5SblqOeM9SmMI18ImFM bViTOvK3KKp0bVTb5EzbbK2dZwTiddlKMfr3HKySzX3JlrlqD0y624ruw3VukkMO jJgquRQSyvje/1t09lVUDiUx5S/Wt7nYBiHpbJCJOBBauvGW9jUctVCMCb+f99SW arWMHull7o2KZsdVfP6G261WvwSXQce2AfR/OT9A3UTruG4tJwAkWZwEKuZXwcVh fylEVM2mwsvvAbY2VzO3QwUaWBv3+dQLTXzy9AEsjtSpnt6f1diGZCOTFxi7b6DG g4v6FOs268i2onqfrEkg8FlDudEe3MhKLAIdUjHTRC9VVXr+q7i7LfXr2B2lMCR6 AdwViWvR/gppwGgqBsorCcw0lSDeinon4/9L04KeOzZHx4E3JMrrrbdkVLvFeyF2 hWmh13Lc8hxFSpeFT0b3BhSd8tmqqjfQEy9Qsrq1DI1xXHhbMcc= =7u3r -----END PGP SIGNATURE-----