lp:~ari-tczew/ubuntu/karmic/trac/fix-CVE-2009-4405

Branch merges

Propose for merging

No branches dependent on this one.

Ready for review for merging into lp:ubuntu/karmic/trac

Jamie Strandboge: Approve on 2010-05-06

Diff: 103 lines (+84/-0)

3 files modified

debian/changelog (+12/-0)
debian/patches/00list (+1/-0)
debian/patches/21_CVE-2009-4405.dpatch (+71/-0)

api

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Bug #394290: Trac needs security fixes

Low

Fix Released

Link a bug report

Related blueprints

23. By Artur Rona on 2010-04-24

Update release target.

22. By Artur Rona on 2010-04-24

* SECURITY UPDATE: Multiple unspecified vulnerabilities in Trac
  before 0.11.6 have unknown impact and attack vectors, possibly
  related to (1) "policy checks in report results when using alternate
  formats" or (2) a "check for the 'raw' role that is missing
  in docutils < 0.6." (LP: #394290)
  - debian/patches/21_CVE-2009-4405.dpatch
  - CVE-2009-4405

21. By Chris Coulson on 2009-09-26

* debian/rules:
  - Include /usr/share/python/python.mk
  - Pass $(py_setup_install_args) to setup.py
  - Use $(py_libdir_sh) for matching distutils installation paths
  - Fixes FTBFS

20. By Martin on 2009-09-15

* Set exec bit for *_frontends (Closes: #510441), thanks to Torsten
  Landschoff for the patch.
* Move python-psycopg2 and python-mysql from Suggests to Depends as
  alternative to python-psqlite2 (Closes: #513117).
* Use debhelper 7 (Closes: #497862).
* Don't compress *-hook files and don't install MS-Windows *.cmd
  files (Closes: #526142), thanks to Jan Dittberner for the patch.
* Add README.source to point to dpatch.

19. By Giuseppe Iuculano on 2008-11-16

* Non-maintainer upload.
* Fix Trac Multiple Vulnerabilities (SA32652) (Closes: #505197)

18. By Luis Matos on 2008-08-16

* Upstream version
  "Trac 0.11.1 contains a number of bug fixes and minor enhancements."
* Patch setup.py to install the contrib dir ( Closes: #495019 )
* Modified compatible version of trac-bzr so that trac 0.11.1 an be
  used with the current trac-bzr version.

17. By Luis Matos on 2008-07-13

* Re-added python-setup-tools to build dependences. Closes: #490320 #468705
* New upstream release Closes: 489727
* Added sugestion for other vcs support available: git bazaar mercurial
* Added spamfilter plugin to sugests
* Moved packaging from python-support to python-central
* Added an entry to the NEWS about the cgi Closes: #490275
* Updated 10_remove_trac_suffix_from_title patch to be used in 0.11

16. By Otavio Salvador on 2007-06-04

[ Otavio Salvador ]
* Remove trac/siteconfig.py on package clean up
* debian/control: Add XS-VCS-{Git,Browser} fields.
* Change maintainer to Debian Trac Team and move Jesus to uploaders
  field.

[ Luis Matos ]
* Add php5-cli to Suggests field (Closes: #407118)
* changed README.Debian. (Closes: #405903)
* Trac shouls at least suggest postgresql-client or mysql-client
  (Closes: #393933)
* Moved python-psycopg2 from depends to suggests
* workaround for instance.__dict__ not accessible in restricted mode
  (Closes: #389826)

15. By Luis Matos on 2007-05-20

* New upstream release (Closes: #414134, #420219)
* Fixed typo in debian/copyright file (Closes: #422409)

14. By Jesus Climent on 2006-12-13

* New upstream upload. Final 0.10.3 release that will hopefully make it into
  Debian 4.0 etch.
* Add a NEWS entry for trac.ini being moved to /etc/trac/trac.ini
  (Closes: #402937)