Debian Bug report logs -
#664135
[CVE-2011-4940] python: potential XSS in SimpleHTTPServer's list_directory()
Reported by: Luciano Bello <luciano@debian.org>
Date: Thu, 15 Mar 2012 19:42:01 UTC
Severity: important
Tags: patch, security
Fixed in version 2.6.7-1
Done: Matthias Klose <doko@debian.org>
Bug is archived. No further changes may be made.
Toggle useless messages
Information forwarded
to debian-bugs-dist@lists.debian.org, Matthias Klose <doko@debian.org>:
Bug#664135; Package python2.6.
(Thu, 15 Mar 2012 19:42:04 GMT) (full text, mbox, link).
Acknowledgement sent
to Luciano Bello <luciano@debian.org>:
Extra info received and forwarded to list. Copy sent to Matthias Klose <doko@debian.org>.
(Thu, 15 Mar 2012 19:42:04 GMT) (full text, mbox, link).
Message #5 received at submit@bugs.debian.org (full text, mbox, reply):
Package: python2.6
Severity: important
Tags: security patch
The following vulnerability had been reported against python:
http://www.openwall.com/lists/oss-security/2012/03/14/11
The patch can be found in the report.
Please use CVE-2011-4940 for this issue.
Cheers,
luciano
Reply sent
to Matthias Klose <doko@debian.org>:
You have taken responsibility.
(Wed, 28 Nov 2012 08:24:05 GMT) (full text, mbox, link).
Notification sent
to Luciano Bello <luciano@debian.org>:
Bug acknowledged by developer.
(Wed, 28 Nov 2012 08:24:05 GMT) (full text, mbox, link).
Message #10 received at 664135-done@bugs.debian.org (full text, mbox, reply):
Version: 2.6.7-1
Am 15.03.2012 20:38, schrieb Luciano Bello:
> Package: python2.6
> Severity: important
> Tags: security patch
>
> The following vulnerability had been reported against python:
> http://www.openwall.com/lists/oss-security/2012/03/14/11
>
> The patch can be found in the report.
>
> Please use CVE-2011-4940 for this issue.
Bug archived.
Request was from Debbugs Internal Request <owner@bugs.debian.org>
to internal_control@bugs.debian.org.
(Thu, 27 Dec 2012 07:27:03 GMT) (full text, mbox, link).
Send a report that this bug log contains spam.
Debian bug tracking system administrator <owner@bugs.debian.org>.
Last modified:
Wed Jun 19 15:02:30 2019;
Machine Name:
buxtehude
Debian Bug tracking system
Debbugs is free software and licensed under the terms of the GNU
Public License version 2. The current version can be obtained
from https://bugs.debian.org/debbugs-source/.
Copyright © 1999 Darren O. Benham,
1997,2003 nCipher Corporation Ltd,
1994-97 Ian Jackson,
2005-2017 Don Armstrong, and many other contributors.
Vulmon