-
Committer:
Package Import Robot
-
Author(s):
Marc Deslauriers
-
Date:
2013-03-11 12:49:11 UTC
-
Revision ID:
package-import@ubuntu.com-20130311124911-ftq83iz7v3nsl4sg
Tags: 2.7.1-1ubuntu3.8
* SECURITY UPDATE: Multiple security issues
- debian/patches/security-mar-2013.patch: upstream patch to fix
multiple security issues.
- CVE-2013-1640 - Remote code execution on master from authenticated clients
- CVE-2013-1652 - Insufficient input validation
- CVE-2013-1653 - Remote code execution
- CVE-2013-1654 - Protocol downgrade
- CVE-2013-1655 - Unauthenticated remote code execution risk
- CVE-2013-2275 - Incorrect default report ACL