[ubuntu/raring-proposed] moin 1.9.5-1ubuntu2 (Accepted)

[Jamie Strandboge]

moin (1.9.5-1ubuntu2) raring-proposed; urgency=low

  * SECURITY UPDATE: arbitrary code execution via anywikidraw/twikidraw
    - debian/patches/CVE-2012-XXXX.patch: adjust action/anywikidraw.py and
      action/twikidraw.py to use wikiutil.taintfilename()
    - CVE-2012-XXXX
  * SECURITY UPDATE: path traversal via AttachFile
    - debian/patches/CVE-2012-YYYY.patch: adjust action/AttachFile.py to use
      wikiutil.taintfilename()
    - CVE-2012-YYYY

Date: Sat, 29 Dec 2012 18:24:10 -0600
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/raring/+source/moin/1.9.5-1ubuntu2
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 29 Dec 2012 18:24:10 -0600
Source: moin
Binary: python-moinmoin
Architecture: source
Version: 1.9.5-1ubuntu2
Distribution: raring-proposed
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Description: 
 python-moinmoin - Python clone of WikiWiki - library
Changes: 
 moin (1.9.5-1ubuntu2) raring-proposed; urgency=low
 .
   * SECURITY UPDATE: arbitrary code execution via anywikidraw/twikidraw
     - debian/patches/CVE-2012-XXXX.patch: adjust action/anywikidraw.py and
       action/twikidraw.py to use wikiutil.taintfilename()
     - CVE-2012-XXXX
   * SECURITY UPDATE: path traversal via AttachFile
     - debian/patches/CVE-2012-YYYY.patch: adjust action/AttachFile.py to use
       wikiutil.taintfilename()
     - CVE-2012-YYYY
Checksums-Sha1: 
 8c9506a294e98e8129954206060e12db8afa3359 2003 moin_1.9.5-1ubuntu2.dsc
 9bb1064c991108695c33dd3db60b308ecfc79a22 131570 moin_1.9.5-1ubuntu2.debian.tar.gz
Checksums-Sha256: 
 0d65b4aaf94802834edea53f9aff631f3d14676a6538c480d8e5e2c56e47b6f4 2003 moin_1.9.5-1ubuntu2.dsc
 40176f318e4190e933208e2c5cff77b5e7c3b46d50f85aa52191278bba844c27 131570 moin_1.9.5-1ubuntu2.debian.tar.gz
Files: 
 452241ad83f918685b5b7fd80a0126b9 2003 net optional moin_1.9.5-1ubuntu2.dsc
 12f416ac3ec2ae2c4679a2d06c5634b7 131570 net optional moin_1.9.5-1ubuntu2.debian.tar.gz
Original-Maintainer: Steve McIntyre <93sam at debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=J7hV
-----END PGP SIGNATURE-----