Branches for Hoary

Name Status Last Modified Last Commit
lp:ubuntu/hoary/trac 1 Development 2009-08-22 10:50:49 UTC
2. Compiled against Python 2.4 for Ubunt...

Author: Aaron Lake
Revision Date: 2005-03-01 17:11:02 UTC

Compiled against Python 2.4 for Ubuntu Hoary.

lp:ubuntu/hoary-security/trac 1 Development 2009-09-02 23:14:11 UTC
3. * SECURITY UPDATE: fix arbitrary file...

Author: Trent Lloyd
Revision Date: 2005-09-16 19:23:13 UTC

* SECURITY UPDATE: fix arbitrary file upload path
* trac/File.py: Check the attachment id for uploads does not contain
  .. in any section, which left unchecked allows the script to
  upload a file to any place in the filesystem writable via the webserver
  which could lead to arbitrary code execution
* References:
  CAN-2005-2147
  https://launchpad.net/malone/bugs/1559
  http://bugs.debian.org/315145

12 of 2 results