I have not been able to independently confirm whether these bugs are fixed in the current moin package on hardy, but according to changelog.Debian.gz, the following CVEs listed above have been fixed in 1.5.8-5.1ubuntu2: 2008-0780 2008-0781 2008-0782. The other CVEs and the DSA aren't explicitly mentioned in the changelog.
It is frustrating as a mere user of moinmoin to be unsure whether these vulnerabilities (known before hardy was released!) are patched or not. -- [moin] [DSA-1514-1] multiple vulnerabilities https://bugs.launchpad.net/bugs/200897 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
