~ubuntu-branches/ubuntu/breezy/awstats/breezy

• Changes
• Files

~ubuntu-branches/ubuntu/breezy/awstats/breezy » Changes from revision 4

From Revision 4

expand all

collapse all

Rev		Summary	Authors	Tags	Date	Diff	Files
4		* SECURITY UPDATE: Fix arbitrary command injection. * SECURITY UPDATE: Fix arbitrary command injection. * Add debian/patches/03_remove_eval.patch:   - Replace all eval() calls for dynamically constructed function names with     soft references. This fixes arbitrary command injection with specially     crafted referer URLs which contain Perl code.   - Patch taken from upstream CVS, and contained in 6.5 release. * References:   CAN-2005-1527   http://www.idefense.com/application/poi/display?id=290&type=vulnerabilities	Martin Pitt	6.4-1ubuntu1	18 years ago
3		* New upstream release. Closes: bug#293702, #293668 (thanks ... * New upstream release. Closes: bug#293702, #293668 (thanks to Nelson   A. de Oliveira <naoliv@biolinux.df.ibilce.unesp.br>).   + Includes upstream fix for security bug fixed in 6.2-1.1.   + Includes upstream fix for most of security bug fixed in 6.2-1.1. * Acknowledge NMUs. Closes: bug#291064, #294488 (thanks to Martin   Schulze <joey@infodrom.org>, Martin Pitt <mpitt@debian.org>, Ubuntu,   Joey Hess <joeyh@debian.org>, Frank Lichtenheld <djpig@debian.org> and Steve   Langasek <vorlon@debian.org>). * Include patch for last parts of security bug fixed in 6.2-1.1:   01_sanitize_more.patch. * Patch (02) to include snapshot of recent development:   + Fix security hole that allowed a user to read log file content     even when plugin rawlog was not enabled.   + Fix a possible use of AWStats for a DoS attack.   + configdir option was broken on windows servers.   + DebugMessages is by default set to 0 for security reasons.   + Minor fixes. * References:   CAN-2005-0435 - read server logs via loadplugin and pluginmode   CAN-2005-0436 - code injection via PluginMode   CAN-2005-0437 - directory traversal via loadplugin   CAN-2005-0438 - information leak via debug	Jonas Smedegaard	6.3-1	19 years ago
2		Really fix bug#247265. Really closes: Bug#247265 (thanks to ... Really fix bug#247265. Really closes: Bug#247265 (thanks to Edward J. Shornock <ed@crazeecanuck.homelinux.net>).	Jonas Smedegaard	6.0-4	20 years ago
1		Import upstream version 6.0 Import upstream version 6.0	Jonas Smedegaard	upstream-6.0	20 years ago

Loggerhead is a web-based interface for Breezy
Version: 2.0.1