Accepted: python-cherrypy 2.2.1-3.1ubuntu1 (source)
Michael Bienia
geser at ubuntu.com
Sat Jan 19 17:35:29 GMT 2008
Accepted:
OK: python-cherrypy_2.2.1.orig.tar.gz
OK: python-cherrypy_2.2.1-3.1ubuntu1.diff.gz
OK: python-cherrypy_2.2.1-3.1ubuntu1.dsc
-> Component: universe Section: python
-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160
Format: 1.7
Date: Sat, 19 Jan 2008 18:30:25 +0100
Source: python-cherrypy
Binary: python-cherrypy
Architecture: source
Version: 2.2.1-3.1ubuntu1
Distribution: hardy
Urgency: high
Maintainer: Ubuntu MOTU Developers <ubuntu-motu at lists.ubuntu.com>
Changed-By: Michael Bienia <geser at ubuntu.com>
Description:
python-cherrypy - Python web development framework
Closes: 461069
Changes:
python-cherrypy (2.2.1-3.1ubuntu1) hardy; urgency=low
.
* Merge from debian unstable, remaining changes:
+ debian/patches/03_autoreloader_fix.diff:
- Fixed the auto-reloader if modules with an invalid __file__ attribute
are loaded, using code from CherryPy 3.
+ Modify Maintainer field.
.
python-cherrypy (2.2.1-3.1) unstable; urgency=high
.
* Non-maintainer upload by security team.
* This update addresses the following security issue:
- Directory traversal vulnerability in the _get_file_path function
in filter/sessionfilter.py allows remote attackers to create or
delete arbitrary files, and possibly read and write portions of
arbitrary files, via a crafted session id in a cookie
(CVE-2008-0252; Closes: #461069).
Files:
692c5163de2a37281a38d7da41e759a0 1038 python optional python-cherrypy_2.2.1-3.1ubuntu1.dsc
188b748b6942939e25e54850f1a78e66 6326 python optional python-cherrypy_2.2.1-3.1ubuntu1.diff.gz
Original-Maintainer: Gustavo Noronha Silva <kov at debian.org>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.8 (GNU/Linux)
iJwEAQEDAAYFAkeSNG8ACgkQo8/XfXdugup8tQQAp/9EWxXSZt4OaawMoUz7Zh9t
HviyV/8x5G04SjhNMC4+dX1P0SbaskfKsBlXH3SmxB4oCkkekhiqM8F6Kplam6ZQ
jXL/Vhus9289c7EpRk/cr+lMy4+M/Wp98IzB5Zp+JkePzSB8o+GjGoZeFy5wa95c
zkrA8hO4ig9JmhyEwvs=
=ThtU
-----END PGP SIGNATURE-----
More information about the Hardy-changes
mailing list