-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 17 Mar 2019 19:40:23 +0100 Source: passenger Binary: passenger libapache2-mod-passenger passenger-doc ruby-passenger ruby-passenger-doc Architecture: i386 Version: 5.0.30-1+deb9u1 Distribution: stretch-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-csail-01) Changed-By: Salvatore Bonaccorso Description: libapache2-mod-passenger - Rails and Rack support for Apache2 passenger - Rails and Rack support passenger-doc - Rails and Rack support for Apache2 - Documentation ruby-passenger - transitional dummy package for passenger ruby-passenger-doc - transitional dummy package for passenger-doc Closes: 884463 921767 Changes: passenger (5.0.30-1+deb9u1) stretch-security; urgency=high . * Non-maintainer upload by the Security Team. * arbitrary file read via REVISION symlink (CVE-2017-16355) (Closes: #884463) * Fix privilege escalation in the Nginx module (CVE-2018-12029) (Closes: #921767) Checksums-Sha1: ddd05faf040f3fee72c47658e91b8662210b265f 3756498 libapache2-mod-passenger-dbgsym_5.0.30-1+deb9u1_i386.deb 9c42a1c4164be0d6da500951aa5d63e7066d2270 327822 libapache2-mod-passenger_5.0.30-1+deb9u1_i386.deb d694f7d789fd1cfa8eaee4188e5af886d14577a0 12099710 passenger-dbgsym_5.0.30-1+deb9u1_i386.deb 23a3dc5ce17dd1be621550ecfb051dcbb2a0bc28 11315 passenger_5.0.30-1+deb9u1_i386.buildinfo 5387f8e667e977de768e2dadd95225a97076abc0 1380086 passenger_5.0.30-1+deb9u1_i386.deb Checksums-Sha256: f7a4f3004fad436b47936e951e3bbfdb34be5c939765913ac1b55f816fd243c7 3756498 libapache2-mod-passenger-dbgsym_5.0.30-1+deb9u1_i386.deb bea3fcc2b918261a9df4dd892d31537e4deffd5c0ed4e22d475431b23156437b 327822 libapache2-mod-passenger_5.0.30-1+deb9u1_i386.deb 4ea75bfab92da836e27ed959da3ea3c4423e8271876fbd4aaf2f4fa98618b31d 12099710 passenger-dbgsym_5.0.30-1+deb9u1_i386.deb cac917a9b023a5c0b835b7a48a2dfea40c4e7bc45f8952c6a205dc3dc597f66e 11315 passenger_5.0.30-1+deb9u1_i386.buildinfo 1bfc1a74784512bc1ec8fda5237a4b93677f16eeaff4727bc8f08ce332356e28 1380086 passenger_5.0.30-1+deb9u1_i386.deb Files: 6d654b60e672ae7895b263ea5acc2b8d 3756498 debug extra libapache2-mod-passenger-dbgsym_5.0.30-1+deb9u1_i386.deb d954ca267a0c7e5b42775baa2ad0c07f 327822 httpd optional libapache2-mod-passenger_5.0.30-1+deb9u1_i386.deb fa1a1f2832e38b089884d1615d7e31fc 12099710 debug extra passenger-dbgsym_5.0.30-1+deb9u1_i386.deb 0a16f6eca14889371858fa176310f891 11315 ruby optional passenger_5.0.30-1+deb9u1_i386.buildinfo fe84d0f572215708be869c3c7e43380f 1380086 ruby optional passenger_5.0.30-1+deb9u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfQCLkDuIfHLCXwkJVmLYJthWcBwFAlyOrB4ACgkQVmLYJthW cBxJ2hAAt0+eWBnXPhJnnYEwv6o2kxDkdmBUGMxLstuWrnbvFJSXJ3TxkJ7DTAOm trV0CrVZS7dFcr3J3wOkhwGqrOdHDK3ydE3+RSAJpvL1/F8E3vkMsU/voHwIkMTY fQNb6DL1x4w7/JcikcAA8ZasRSxwWESH0deCh1Plfq3DmxfbKrnzOvk1JAXycHRn BbeR7qpujXP3kkbH5YYJP6J+mzUGmcrw8y9EbaPhhN0KAOFjrCvOmU/eDrogRv+Y r4UeCAiOVMoeaTRYNnJcPVpa53h1LPEwq+thwbaCSKEMHhON3fSlmH3XS/Z0PQgy VC4nYkwMcRTQ1x2sgheeB8MPIqaE8Oqc+nP2Q9PNgfbeKOzPSHS3a1SItOjJJsnU U3r3xcbab6hmAEPq4bgKYq9QfL1dSgu+9IR7NILH+OfZvJtWryUZBpAlRGcPPiAl 0bB5vZMoNDbYjyE/rVOwvzL8hc8nW7vY0T0wvdHcZZgmW3PHOat+IEu90BJlYL2Z NbkZsKycxjAVE+xzTmeYwBiTe/7g35F3CyckivPbsTTvcXltk8rUoZ24xTy/gwCr YpbVp10CZzM5JusSbwpBW500MIlIH+V0ju4B2buZecmidyY/sb5MGOZ+IiKC+4KV mWhNaVW7qf5cQ1jIocKBIOOCcgbnO+9R1WP9RZBvGMXLiFw8niA= =H2ag -----END PGP SIGNATURE-----