Ubuntu
zope3 package

Branches for Intrepid

Name Status Last Modified Last Commit
lp:ubuntu/intrepid/zope3 2 Mature 2009-12-05 04:26:37 UTC
23. Merge with Debian (no changes, differ...

Author: Matthias Klose
Revision Date: 2008-06-23 15:10:46 UTC

Merge with Debian (no changes, different source tarball).
lp:ubuntu/intrepid-security/zope3 2 Mature 2009-12-05 04:26:55 UTC
24. * SECURITY UPDATE: arbitrary code exe...

Author: Marc Deslauriers
Revision Date: 2009-10-13 13:44:19 UTC

* SECURITY UPDATE: arbitrary code execution via ZEO network protocol
  - debian/patches/security-CVE-2009-066x.dpatch: introduce
    ServerMarshaller() and server_find_global() in
    Dependencies/ZEO-Zope-3.3.1/ZEO/zrpc/{marshal.py,connection.py}.
  - CVE-2009-0668
* SECURITY UPDATE: authentication bypass via ZEO network protocol
  - debian/patches/security-CVE-2009-066x.dpatch: make finish_auth()
    private in Dependencies/ZEO-Zope-3.3.1/ZEO/{auth/auth_digest.py,
    StorageServer.py, tests/auth_plaintext.py}.
  - CVE-2009-0669
* SECURITY UPDATE: denial of service via too many new object identifiers
  - debian/patches/security-CVE-2009-066x.dpatch: limit new oids to 100
    in Dependencies/ZEO-Zope-3.3.1/ZEO/StorageServer.py.
  - No CVE
lp:ubuntu/intrepid-updates/zope3 2 Mature 2009-12-05 04:27:25 UTC
24. * SECURITY UPDATE: arbitrary code exe...

Author: Marc Deslauriers
Revision Date: 2009-10-13 13:44:19 UTC

* SECURITY UPDATE: arbitrary code execution via ZEO network protocol
  - debian/patches/security-CVE-2009-066x.dpatch: introduce
    ServerMarshaller() and server_find_global() in
    Dependencies/ZEO-Zope-3.3.1/ZEO/zrpc/{marshal.py,connection.py}.
  - CVE-2009-0668
* SECURITY UPDATE: authentication bypass via ZEO network protocol
  - debian/patches/security-CVE-2009-066x.dpatch: make finish_auth()
    private in Dependencies/ZEO-Zope-3.3.1/ZEO/{auth/auth_digest.py,
    StorageServer.py, tests/auth_plaintext.py}.
  - CVE-2009-0669
* SECURITY UPDATE: denial of service via too many new object identifiers
  - debian/patches/security-CVE-2009-066x.dpatch: limit new oids to 100
    in Dependencies/ZEO-Zope-3.3.1/ZEO/StorageServer.py.
  - No CVE
1 → 3 of 3 results First • Previous • Next • Last