Please merge moin 1.8.1-1.1 (main) from Debian unstable (main).
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| moin (Ubuntu) |
Fix Released
|
Wishlist
|
Unassigned | ||
Bug Description
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
affects ubuntu/moin
status new
importance wishlist
subscribe ubuntu-
Please merge moin 1.8.1-1.1 (main) from Debian unstable (main).
New debian version fixes the following CVE:
- CVE-2009-0260
- CVE-2009-0312
Changelog since current jaunty version 1.8.1-1ubuntu1:
moin (1.8.1-1.1) unstable; urgency=high
* Non-maintainer upload by the security team
* Fix cross-site scripting vulnerability via basename parameter in the
AttachFile action (Closes: #513158)
Fixes: CVE-2009-0260
* Fix cross-site scripting vulnerability in antispam.py via malformed
content
Fixes: CVE-2009-0312
-- Steffen Joeris <email address hidden> Wed, 28 Jan 2009 02:34:32 +0100
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEARECAAYFAkm
wd8AmwS1yP+
=FSa+
-----END PGP SIGNATURE-----
Related branches
| Alessio Treglia (quadrispro) wrote | #1 |
| Alessio Treglia (quadrispro) wrote | #2 |
| Changed in moin: | |
| status: | New → Confirmed |
| Alessio Treglia (quadrispro) wrote | #3 |
| Alessio Treglia (quadrispro) wrote | #4 |
| Launchpad Janitor (janitor) wrote | #5 |
| Changed in moin: | |
| status: | Confirmed → Fix Released |
moin (1.8.1-1.1ubuntu1) jaunty; urgency=low
* Merge from debian unstable (LP: #322890), Ubuntu remaining changes:
- Remove python-xml from Recommends field, the package isn't anymore in
sys.path.
-- Alessio Treglia <email address hidden> Thu, 29 Jan 2009 20:36:20 +0100