~ubuntu-branches/ubuntu/hardy/backuppc/hardy-security : changes

~ubuntu-branches/ubuntu/hardy/backuppc/hardy-security » Changes from revision 17

From Revision 17

Rev	Summary	Authors	Tags	Date
17	* SECURITY UPDATE: XSS in CGI/RestoreFile.pm * SECURITY UPDATE: XSS in CGI/RestoreFile.pm - lib/BackupPC/CGI/RestoreFile.pm: update to escape share and backup number - CVE-2011-5081	Jamie Strandboge	3.0.0-4ubuntu1.4	11 years ago
16	* SECURITY UPDATE: XSS in CGI/Browse.pm * SECURITY UPDATE: XSS in CGI/Browse.pm - lib/BackupPC/CGI/Browse.pm: update to verify backup number is numeric - http://backuppc.cvs.sourceforge.net/viewvc/backuppc/BackupPC/lib/BackupPC/CGI/Browse.pm?r1=1.23&r2=1.24&view=patch - CVE-2011-3361 * SECURITY UPDATE: XSS in CGI/View.pm - lib/BackupPC/CGI/View.pm: update to verify backup number is numeric - CVE-2011-XXXX	Jamie Strandboge	3.0.0-4ubuntu1.3	12 years ago
15	* SECURITY UPDATE: authorization bypass via ClientNameAlias ... * SECURITY UPDATE: authorization bypass via ClientNameAlias function - lib/BackupPC/CGI/EditConfig.pm: disable ClientNameAlias usage by normal users - Patch based on: http://patch-tracker.debian.org/patch/misc/view/backuppc/3.1.0-7/lib/BackupPC/CGI/EditConfig.pm - CVE-2009-3369	Marc Deslauriers	3.0.0-4ubuntu1.1	14 years ago
14	* Merge from Debian unstable * Merge from Debian unstable * Remaining Ubuntu changes: - Use LSB functions in the init script, and make /var/run/backuppc if needed. - Remove dependancy on wwwconfig-common. - We like apache 2 more, so move it first to the alternatives list. - Bump libfile-rsyncp-perl and rsync from Suggests to Depends. - Remove stop script symlinks from rc0 and rc6. - Don't chown /var/run/backuppc in the postinst. - Don't move /var/lib/backuppc/conf/* (and then delete) to /etc/backuppc in rules, upstream is shipping the config files in /etc/backuppc themselves. - Unfuzzify debian/config.pl.diff. - Munge Maintainer field as per spec. - Add .conf to the symlink removal code in prerm. (LP: #84487)	Reinhard Tartler	3.0.0-4ubuntu1	16 years ago
13	Add .conf to the symlink removal code in prerm. (LP: #84487) Add .conf to the symlink removal code in prerm. (LP: #84487)	Karl Goetz	3.0.0-3ubuntu2	16 years ago
12	* Merge from Debian unstable * Merge from Debian unstable * Remaining Ubuntu changes: - Use LSB functions in the init script, and make /var/run/backuppc if needed. - Remove dependancy on wwwconfig-common. - We like apache 2 more, so move it first to the alternatives list. - Bump libfile-rsyncp-perl and rsync from Suggests to Depends. - Remove stop script symlinks from rc0 and rc6. - Don't chown /var/run/backuppc in the postinst. - Don't move /var/lib/backuppc/conf/* (and then delete) to /etc/backuppc in rules, upstream is shipping the config files in /etc/backuppc themselves. - Unfuzzify debian/config.pl.diff. - Munge Maintainer field as per spec.	Steve Kowalik	3.0.0-3ubuntu1	16 years ago
11	* Merge from Debian unstable. * Merge from Debian unstable. * Remaining Ubuntu changes: - Use LSB functions in the init script, and make /var/run/backuppc if needed. - Remove dependancy on wwwconfig-common. - We like apache 2 more, so move it first to the alternatives list. - Bump libfile-rsyncp-perl and rsync from Suggests to Depends. - Remove stop script symlinks from rc0 and rc6. * Ubuntu changes dropped: - Don't use wwwconfig-common in post{inst,rm}. * Don't chown /var/run/backuppc in the postinst. * Don't move /var/lib/backuppc/conf/* (and then delete) to /etc/backuppc in rules, upstream is shipping the config files in /etc/backuppc themselves. * Unfuzzify debian/config.pl.diff. * Munge Maintainer field as per spec.	Steve Kowalik	3.0.0-2ubuntu1	16 years ago
10	Remove stop script symlinks from rc0 and rc6. Remove stop script symlinks from rc0 and rc6.	Scott James Remnant	2.1.2-5ubuntu3	17 years ago
9	debian/control, debian/postinst: Get rid of wwwconfig-common... debian/control, debian/postinst: Get rid of wwwconfig-common.	Martin Pitt	2.1.2-5ubuntu2	17 years ago
8	Merge from debian unstable. Merge from debian unstable.	Martin Pitt	2.1.2-5ubuntu1	17 years ago
7	Bump libfile-rsyncp-perl and rsync from Suggests: to Depends... Bump libfile-rsyncp-perl and rsync from Suggests: to Depends: to make the package work out of the box in a nice way. Thanks to Christian Bjälevik <nafallo@magicalforest.se> for the suggestion.	Martin Pitt	2.1.2-2ubuntu5	18 years ago
6	Oops, this seemed to get double-fixed. Oops, this seemed to get double-fixed.	Scott James Remnant	2.1.2-2ubuntu4	18 years ago
5	Make /var/run/backuppc in the init script, and set its owner... Make /var/run/backuppc in the init script, and set its ownership; rather than shipping it in the package.	Scott James Remnant	2.1.2-2ubuntu3	18 years ago
4	We like apache 2 more than apache 1, so move that first in t... We like apache 2 more than apache 1, so move that first in the Depends line.	Tollef Fog Heen	2.1.2-2ubuntu2	18 years ago
3	Remove dependency on wwwconfig-common, dropped in sync. Remove dependency on wwwconfig-common, dropped in sync.	Matthias Klose	2.1.1-2ubuntu3	18 years ago
2	* Sync Debian packaging with 2.1.1-1, but leave the upstream... * Sync Debian packaging with 2.1.1-1, but leave the upstream release at 2.1.1, as the Debian packaging fixes all seem needed, but I'm not prepared to trust a new upstream release this close to Hoary's release. * Changes from Debian's 2.1.1-1: - Do not modify config.pl in the postinst. (Ubuntu bug #8117) Thanks to Peter Palfrader for the patch. Closes: #301076. - Moved the 'rm -rf /etc/backuppc'. Closes: #301084. - Check that backuppc.config is not run 2 times before generating a random password. Closes: #301087. - Added /bin/sh as shell for the backuppc user. Closes: #299852.	Adam Conrad	2.1.0-10ubuntu1	19 years ago
1	Import upstream version 2.1.0 Import upstream version 2.1.0	Adam Conrad	upstream-2.1.0	19 years ago