• [SECURITY] [DSA 3826-1] tryton-server security update

    From Salvatore Bonaccorso@1:229/2 to All on Tue Apr 4 17:40:03 2017
    From: [email protected]

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-3826-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso
    April 04, 2017 https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : tryton-server
    CVE ID : CVE-2017-0360

    It was discovered that the original patch to address CVE-2016-1242 did
    not cover all cases, which may result in information disclosure of file contents.

    For the stable distribution (jessie), this problem has been fixed in
    version 3.4.0-3+deb8u3.

    For the unstable distribution (sid), this problem has been fixed in
    version 4.2.1-2.

    We recommend that you upgrade your tryton-server packages.

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: [email protected]
    -----BEGIN PGP SIGNATURE-----

    iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAljju8NfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND z0StVA//ezWfo/ezFDeoPQ1cu4q3co20fqjqGDfvHege2u7KC1C14yztlg8a17xY 0Qy0CRmx/Nx/9xSFYdeHlelhx2IN65Q7u4BHHGKjtYdLq2SWtvEGSqm5wAQOt5Ba vnaE5ghNbyfaxvsKGAh+emCmxob2+863ug6W8MQrl6a2B9ByJFHbzGvdQI7d6S5+ uzV3ucvp+I7xvE+Q4ouRK/W3dr4CGSFajscDLjePEKelqmJ4ZPrLWEXUfX5XnRF/ A9++/xOvMw77+EuNF47RTotduR44LlCPaAieragBjlUO/ekgpKrXVWu8qcshOlPQ ygZhqFwDd6ptvjIxcPkUxI8x4a7gVVUEmWHSW0EYkxeXuD3hk0XO/hZA7WmAXgp5 RvB5HK4DZPfS14wU28pbkgTjIO0VHB+kyPuNq1yiwuV7JG567guIAtD8Jn2p9pyw ljYkOP4bLvfa2ErBT4kyYZeKXz6bAhK0aOMSaMN61Pu0qpsUh7fG5SmNWuxBeTwC 08LQryYYfuEaOKQI5tHhFj+WYrhR/fT1N5FfcbLpcFFdwUo2ynsdtXmEsp1GiFw7 BUVgYBdWbKvy663JMPFCy2abwqYbUH9PRcHHj8PgHAup+9r0s4RAKYQGGz9cJQIr 9PB97Qc/DsWl8T//P00ArjvP9k/l46eiuCT1H6EZWzvp0jfBjZg=
    =7rby
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)