lp:ubuntu/jaunty-updates/zope3

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

27. By Marc Deslauriers on 2009-10-13

* SECURITY UPDATE: arbitrary code execution via ZEO network protocol
  - debian/patches/security-CVE-2009-066x.dpatch: introduce
    ServerMarshaller() and server_find_global() in
    Dependencies/ZEO-Zope-3.4.0/ZEO/zrpc/{marshal.py,connection.py}.
  - CVE-2009-0668
* SECURITY UPDATE: authentication bypass via ZEO network protocol
  - debian/patches/security-CVE-2009-066x.dpatch: make finish_auth()
    private in Dependencies/ZEO-Zope-3.4.0/ZEO/{auth/auth_digest.py,
    StorageServer.py, tests/auth_plaintext.py}.
  - CVE-2009-0669
* SECURITY UPDATE: denial of service via too many new object identifiers
  - debian/patches/security-CVE-2009-066x.dpatch: limit new oids to 100
    in Dependencies/ZEO-Zope-3.4.0/ZEO/StorageServer.py.
  - No CVE
* debian/patches/deb-zopeconf.dpatch: fix typo so ZOPE_USER is properly
  defined. (LP: #356137)

26. By Michael Vogt on 2009-03-25

fix undeclared file conflicts that cause python-central to
error in postinst (LP: #347939)

25. By Matthias Klose on 2009-02-21

Regenerate the python-zopeinterface pkgconfig file. LP: #332516.

24. By Matthias Klose on 2009-02-21

* New upstream version, final release.
* Merge changes from 3.3.1-6 and 3.3.1-7.
* Build using python2.5.

23. By Matthias Klose on 2008-06-23

Merge with Debian (no changes, different source tarball).

22. By Matthias Klose on 2008-04-09

Set the egg version for zope.interface to 3.3.1. LP: #185418.

21. By Matthias Klose on 2008-02-27

* Merge with Debian (no changes, different source tarball).
 * Drop dependency on python-xml.

20. By Matthias Klose on 2007-12-12

Fake sync (different source tarball).

19. By LaMont Jones on 2007-10-04

Trigger rebuild for hppa

18. By Matthias Klose on 2007-07-01

Fake sync (different source tarball).