Branches for Jaunty

Name Status Last Modified Last Commit
lp:ubuntu/jaunty/zope3 bug 2 Mature 2009-12-05 04:31:30 UTC
26. fix undeclared file conflicts that ca...

Author: Michael Vogt
Revision Date: 2009-03-25 17:59:15 UTC

fix undeclared file conflicts that cause python-central to
error in postinst (LP: #347939)

lp:ubuntu/jaunty-security/zope3 bug 2 Mature 2009-12-05 04:31:46 UTC
27. * SECURITY UPDATE: arbitrary code exe...

Author: Marc Deslauriers
Revision Date: 2009-10-13 13:39:22 UTC

* SECURITY UPDATE: arbitrary code execution via ZEO network protocol
  - debian/patches/security-CVE-2009-066x.dpatch: introduce
    ServerMarshaller() and server_find_global() in
    Dependencies/ZEO-Zope-3.4.0/ZEO/zrpc/{marshal.py,connection.py}.
  - CVE-2009-0668
* SECURITY UPDATE: authentication bypass via ZEO network protocol
  - debian/patches/security-CVE-2009-066x.dpatch: make finish_auth()
    private in Dependencies/ZEO-Zope-3.4.0/ZEO/{auth/auth_digest.py,
    StorageServer.py, tests/auth_plaintext.py}.
  - CVE-2009-0669
* SECURITY UPDATE: denial of service via too many new object identifiers
  - debian/patches/security-CVE-2009-066x.dpatch: limit new oids to 100
    in Dependencies/ZEO-Zope-3.4.0/ZEO/StorageServer.py.
  - No CVE
* debian/patches/deb-zopeconf.dpatch: fix typo so ZOPE_USER is properly
  defined. (LP: #356137)

lp:ubuntu/jaunty-updates/zope3 2 Mature 2009-12-05 04:28:55 UTC
27. * SECURITY UPDATE: arbitrary code exe...

Author: Marc Deslauriers
Revision Date: 2009-10-13 13:39:22 UTC

* SECURITY UPDATE: arbitrary code execution via ZEO network protocol
  - debian/patches/security-CVE-2009-066x.dpatch: introduce
    ServerMarshaller() and server_find_global() in
    Dependencies/ZEO-Zope-3.4.0/ZEO/zrpc/{marshal.py,connection.py}.
  - CVE-2009-0668
* SECURITY UPDATE: authentication bypass via ZEO network protocol
  - debian/patches/security-CVE-2009-066x.dpatch: make finish_auth()
    private in Dependencies/ZEO-Zope-3.4.0/ZEO/{auth/auth_digest.py,
    StorageServer.py, tests/auth_plaintext.py}.
  - CVE-2009-0669
* SECURITY UPDATE: denial of service via too many new object identifiers
  - debian/patches/security-CVE-2009-066x.dpatch: limit new oids to 100
    in Dependencies/ZEO-Zope-3.4.0/ZEO/StorageServer.py.
  - No CVE
* debian/patches/deb-zopeconf.dpatch: fix typo so ZOPE_USER is properly
  defined. (LP: #356137)

13 of 3 results