awstats (6.7.dfsg-1ubuntu0.2) hardy-security; urgency=low
* SECURITY UPDATE: directory traversal via crafted LoadPlugin directory
- debian/patches/3000_CVE-2010-4369.patch: properly sanitize plugin
name in wwwroot/cgi-bin/awstats.pl.
- CVE-2010-4369
Date: Tue, 11 Jan 2011 17:39:15 -0600
Changed-By: Marc Deslauriers <[email protected]>
Maintainer: Ubuntu Core Developers <[email protected]>
https://launchpad.net/ubuntu/hardy/+source/awstats/6.7.dfsg-1ubuntu0.2
Format: 1.7
Date: Tue, 11 Jan 2011 17:39:15 -0600
Source: awstats
Binary: awstats
Architecture: source
Version: 6.7.dfsg-1ubuntu0.2
Distribution: hardy-security
Urgency: low
Maintainer: Ubuntu Core Developers <[email protected]>
Changed-By: Marc Deslauriers <[email protected]>
Description:
awstats - powerful and featureful web server log analyzer
Changes:
awstats (6.7.dfsg-1ubuntu0.2) hardy-security; urgency=low
.
* SECURITY UPDATE: directory traversal via crafted LoadPlugin directory
- debian/patches/3000_CVE-2010-4369.patch: properly sanitize plugin
name in wwwroot/cgi-bin/awstats.pl.
- CVE-2010-4369
Files:
492ba4f3e2f2ffe51aa9a97fca7783c6 1620 web optional
awstats_6.7.dfsg-1ubuntu0.2.dsc
4776192ee160583ce30b21f5fbe66003 23771 web optional
awstats_6.7.dfsg-1ubuntu0.2.diff.gz
Original-Maintainer: Debian AWStats Team
<[email protected]>
--
Hardy-changes mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/hardy-changes
