[CVE-2012-6081] moin: remote code execution vulnerability

Related Vulnerabilities: CVE-2012-6081  

Debian Bug report logs - #696948
[CVE-2012-6081] moin: remote code execution vulnerability

version graph

Package: moin; Maintainer for moin is Steve McIntyre <93sam@debian.org>;

Reported by: Henri Salo <henri@nerv.fi>

Date: Sat, 29 Dec 2012 19:27:02 UTC

Severity: important

Tags: security

Found in version 1.9.5-2

Fixed in version 1.9.5-3

Done: Steve McIntyre <steve@einval.com>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, Steve McIntyre <93sam@debian.org>:
Bug#696948; Package moin. (Sat, 29 Dec 2012 19:27:04 GMT) (full text, mbox, link).


Acknowledgement sent to Henri Salo <henri@nerv.fi>:
New Bug report received and forwarded. Copy sent to Steve McIntyre <93sam@debian.org>. (Sat, 29 Dec 2012 19:27:04 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Henri Salo <henri@nerv.fi>
To: submit@bugs.debian.org
Subject: moin: remote code execution vulnerability
Date: Sat, 29 Dec 2012 21:22:54 +0200
Package: moin
Version: 1.9.5-2
Severity: important
Tags: security

Details can be found at: http://moinmo.in/SecurityFixes
A fix is available at: http://hg.moinmo.in/moin/1.9/rev/7e7e1cbb9d3f
CVE request: http://www.openwall.com/lists/oss-security/2012/12/29/6

- Henri Salo



Information forwarded to debian-bugs-dist@lists.debian.org, Steve McIntyre <93sam@debian.org>:
Bug#696948; Package moin. (Sat, 29 Dec 2012 19:42:03 GMT) (full text, mbox, link).


Acknowledgement sent to Steve McIntyre <steve@einval.com>:
Extra info received and forwarded to list. Copy sent to Steve McIntyre <93sam@debian.org>. (Sat, 29 Dec 2012 19:42:03 GMT) (full text, mbox, link).


Message #10 received at 696948@bugs.debian.org (full text, mbox, reply):

From: Steve McIntyre <steve@einval.com>
To: Henri Salo <henri@nerv.fi>, 696948@bugs.debian.org
Subject: Re: Bug#696948: moin: remote code execution vulnerability
Date: Sat, 29 Dec 2012 19:38:02 +0000
close 696948 1.9.5-3
thanks

On Sat, Dec 29, 2012 at 09:22:54PM +0200, Henri Salo wrote:
>Package: moin
>Version: 1.9.5-2
>Severity: important
>Tags: security
>
>Details can be found at: http://moinmo.in/SecurityFixes
>A fix is available at: http://hg.moinmo.in/moin/1.9/rev/7e7e1cbb9d3f
>CVE request: http://www.openwall.com/lists/oss-security/2012/12/29/6

Already fixed, thanks for the report.

-- 
Steve McIntyre, Cambridge, UK.                                steve@einval.com
"Managing a volunteer open source project is a lot like herding
 kittens, except the kittens randomly appear and disappear because they
 have day jobs." -- Matt Mackall




Marked as fixed in versions 1.9.5-3. Request was from Steve McIntyre <steve@einval.com> to control@bugs.debian.org. (Sat, 29 Dec 2012 19:42:07 GMT) (full text, mbox, link).


Marked Bug as done Request was from Steve McIntyre <steve@einval.com> to control@bugs.debian.org. (Sat, 29 Dec 2012 19:42:07 GMT) (full text, mbox, link).


Notification sent to Henri Salo <henri@nerv.fi>:
Bug acknowledged by developer. (Sat, 29 Dec 2012 19:42:08 GMT) (full text, mbox, link).


Changed Bug title to '[CVE-2012-6081] moin: remote code execution vulnerability' from 'moin: remote code execution vulnerability' Request was from Salvatore Bonaccorso <carnil@debian.org> to control@bugs.debian.org. (Sun, 30 Dec 2012 06:30:03 GMT) (full text, mbox, link).


Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Tue, 29 Jan 2013 07:26:24 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed Jun 19 16:45:40 2019; Machine Name: beach

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.