~ubuntu-branches/ubuntu/jaunty/moin/jaunty-security : changes

~ubuntu-branches/ubuntu/jaunty/moin/jaunty-security » Changes from revision 31

From Revision 31 to 12

Rev	Summary	Authors	Tags	Date
31	* SECURITY UPDATE: arbitrary script injection via multiple c... * SECURITY UPDATE: arbitrary script injection via multiple cross-site scripting issues. - debian/patches/30006_CVE-2010-2487,2969,2970.patch: properly escape strings in MoinMoin/{Page,PageEditor,PageGraphicalEditor}.py, MoinMoin/action/*.py. - CVE-2010-2487 - CVE-2010-2969	Marc Deslauriers	1.8.2-2ubuntu2.5	14 years ago
30	* SECURITY UPDATE: restrictions bypass via incorrect acl che... * SECURITY UPDATE: restrictions bypass via incorrect acl checking - debian/patches/30005_CVE-2009-4762.patch: don't check parents if item has an ACL in MoinMoin/security/__init__.py. - CVE-2009-4762	Marc Deslauriers	1.8.2-2ubuntu2.4	14 years ago
29	* SECURITY UPDATE: fix XSS in Despam action * SECURITY UPDATE: fix XSS in Despam action - debian/patches/30004_CVE-2010-0828.patch: use wikiutil.escape() in revert_pages() - CVE-2010-0828	Jamie Strandboge	1.8.2-2ubuntu2.3	14 years ago
28	* SECURITY UPDATE: fix multiple CSRF vulnerabilities * SECURITY UPDATE: fix multiple CSRF vulnerabilities - debian/patches/30002_CVE-2010-0668+0717.patch: add tickets to prevent CSRF attacks in several components. - CVE-2010-0668 * SECURITY UPDATE: properly sanitize user profiles - debian/patches/30003_CVE-2010-0669.patch: adjust userprefs/prefs.py, user.py and wikiutil.py to sanitize input - CVE-2010-0669	Jamie Strandboge	1.8.2-2ubuntu2.2	14 years ago
27	* SECURITY UPDATE: Multiple XSS vulnerabilities in action/At... * SECURITY UPDATE: Multiple XSS vulnerabilities in action/AttachFile.py - debian/patches/30001_security_CVE-2009-1482.patch: escape msg, pagename and attachment_name in MoinMoin/action/AttachFile.py. - CVE-2009-1482	Marc Deslauriers	1.8.2-2ubuntu2.1	15 years ago
26	Demote fckeditor from Recommends to Suggests; the code was Demote fckeditor from Recommends to Suggests; the code was previously embedded in moin, but it was also disabled, so there's no reason for us to pull this in by default currently.	Steve Langasek	1.8.2-2ubuntu2	15 years ago
25	* Merge from debian unstable (LP: #350287), Ubuntu remaining... * Merge from debian unstable (LP: #350287), Ubuntu remaining changes: - Remove python-xml from Recommends field, the package isn't anymore in sys.path. * debian/patches/10002_encodeAddress_fix_MIME_spacing.patch: - Headers are malformed in notification email when, in mail_from, there is a phrase before the angle address that gets encoded. Thanks to Matthias Andree for the patch (LP: #348960). * debian/rules: - Add --install-layout=deb option to install everything in /usr instead of /usr/local, fix FTBFS.	Alessio Treglia	1.8.2-2ubuntu1	15 years ago
24	* Merge from debian unstable (LP: #322890), Ubuntu remaining... * Merge from debian unstable (LP: #322890), Ubuntu remaining changes: - Remove python-xml from Recommends field, the package isn't anymore in sys.path.	Alessio Treglia	1.8.1-1.1ubuntu1	15 years ago
23	* Merge from debian unstable, remaining changes: LP: #313687 * Merge from debian unstable, remaining changes: LP: #313687 - Drop recommendation of python-xml, the packages isn't anymore in sys.path.	Bhavani Shankar	1.8.1-1ubuntu1	15 years ago
22	* Merge from debian unstable, remaining changes: * Merge from debian unstable, remaining changes: - Drop recommendation of python-xml, the packages isn't anymore in sys.path.	Michael Vogt	1.8.0-1ubuntu1	15 years ago
21	Drop recommendation of python-xml, the packages isn't anymor... Drop recommendation of python-xml, the packages isn't anymore in sys.path.	Matthias Klose	1.7.1-1ubuntu1	16 years ago
20	* New upstream release. Closes: bug#492233, thanks to Teodo... * New upstream release. Closes: bug#492233, thanks to Teodor. + Fixes bogus empty page creation. Closes: bug#489146, thanks to Sam Morris. * Recommend python-xml, needed for RSS feeds. Closes: bug#488777, thanks to Sam Morris. * Add patch 10001 to disable RenderAsDocbook if python-xml is not available. Closes: bug#487741, thanks to Franklin Piat. * Update cdbs snippets: + Move dependency cleanup to new local snippet package-relations.mk. + Update copyright-check output to more closely match proposed new copyright file format. + Update README.cdbs-tweaks.	Jonas Smedegaard	1.7.1-1	16 years ago
19	* SECURITY FIX: (LP: #248167) * SECURITY FIX: (LP: #248167) + debian/patches/20080713_XSS_advanced_search.diff - XSS security issue for advanced search form: added escaping. * References: + http://hg.moinmo.in/moin/1.7/rev/383196922b03 * debian/control: - updated maintainer field.	Emanuele Gentili	1.7.0-3ubuntu1	16 years ago
18	Simplify /etc/moin/wikilist format: "USER URL" (drop unneede... Simplify /etc/moin/wikilist format: "USER URL" (drop unneeded middle CONFIG_DIR that was wrongly advertised as DATA_DIR). Make moin-mass-migrate handle both formats and warn about deprecation of the old one.	Jonas Smedegaard	1.7.0-3	16 years ago
17	Do not suggest python-xml, but python-4suite-xml. Do not suggest python-xml, but python-4suite-xml.	Matthias Klose	1.5.8-5.1ubuntu2	16 years ago
16	* Merge with Debian (LP: #193869); remaining changes: * Merge with Debian (LP: #193869); remaining changes: - Suggest python-xml (needed for DocBook rendering). LP: #31728.	Emanuele Gentili	1.5.8-5.1ubuntu1	16 years ago
15	* Merge with Debian; remaining changes: * Merge with Debian; remaining changes: - Suggest python-xml (needed for DocBook rendering). LP: #31728.	Matthias Klose	1.5.8-5ubuntu1	16 years ago
14	Suggest python-xml (needed for DocBook rendering). LP: #3172... Suggest python-xml (needed for DocBook rendering). LP: #31728.	Matthias Klose	1.5.7-3ubuntu2	17 years ago
13	* Merge from debian unstable, remaining changes: * Merge from debian unstable, remaining changes: - 11000_show_traceback_toggle.patch: allow for 'show_traceback=0' in Moin configurations.	Kees Cook	1.5.7-3ubuntu1	17 years ago
12	* debian/patches/091_show-traceback-option.patch: allow for * debian/patches/091_show-traceback-option.patch: allow for 'show_traceback=0' in Moin configurations. * References CVE-2007-0902	Kees Cook	1.5.3-1.1ubuntu3	17 years ago

Older »