-
python-cherrypy (2.2.1-4) unstable; urgency=low
[ Piotr Ożarowski ]
* Vcs-Svn, Vcs-Browser and Homepage fields added
* New python-support handles egg's directory name correctly
- bump python-support required version
- remove mv part from debian/rules
[ Loic Minier ]
* Only track 2.x versions in watch file; thanks Goedson Teixeira Paixao.
[ Scott Kitterman ]
* debian/patches/03_autoreloader_fix.dpatch
- Fixed the auto-reloader if modules with an invalid __file__ attribute
are loaded, using code from CherryPy 3.
[ Sandro Tosi ]
* debian/control
- uniforming Vcs-Browser field
[ Gustavo Noronha Silva ]
* acknowledging NMU by Nico, thanks! (Closes: #461069)
* debian/control:
- updated Standards-Version to 3.7.3
- turn build-depends-indep into build-deps, since they are needed on clean
-- Albin Tonnerre <email address hidden> Tue, 05 Feb 2008 00:50:48 +0000
-
python-cherrypy (2.2.1-3.1ubuntu1) hardy; urgency=low
* Merge from debian unstable, remaining changes:
+ debian/patches/03_autoreloader_fix.diff:
- Fixed the auto-reloader if modules with an invalid __file__ attribute
are loaded, using code from CherryPy 3.
+ Modify Maintainer field.
python-cherrypy (2.2.1-3.1) unstable; urgency=high
* Non-maintainer upload by security team.
* This update addresses the following security issue:
- Directory traversal vulnerability in the _get_file_path function
in filter/sessionfilter.py allows remote attackers to create or
delete arbitrary files, and possibly read and write portions of
arbitrary files, via a crafted session id in a cookie
(CVE-2008-0252; Closes: #461069).
-- Michael Bienia <email address hidden> Sat, 19 Jan 2008 18:30:25 +0100
-
python-cherrypy (2.2.1-3ubuntu1) feisty; urgency=low
* Modify Maintainer field.
* debian/patches/03_autoreloader_fix.dpatch
- Fixed the auto-reloader if modules with an invalid __file__ attribute
are loaded, using code from CherryPy 3. (LP: #85233)
-- Steve Kowalik <email address hidden> Mon, 19 Feb 2007 19:30:51 +1100
