pkg-perl-maintainers team mailing list archive

[Ansgar Burchardt <ansgar@xxxxxxxxxx>]

*** This bug is a security vulnerability ***

Public security bug reported:

Binary package hint: libmojolicious-perl

Viacheslav Tykhanovskyi discovered a directory traversal vulnerability
in Mojolicious, a Perl Web Application Framework.

This was fixed in Debian in 1.16-1 (unstable), 0.999926-1+squeeze1
(squeeze).

** Affects: libmojolicious-perl (Ubuntu)
     Importance: Undecided
         Status: New

** Affects: libmojolicious-perl (Debian)
     Importance: Unknown
         Status: Unknown

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2011-1589

** Visibility changed to: Public

** Bug watch added: Debian Bug tracker #622952
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=622952

** Also affects: libmojolicious-perl (Debian) via
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=622952
   Importance: Unknown
       Status: Unknown

-- 
You received this bug notification because you are a member of Debian
Perl Group, which is subscribed to libmojolicious-perl in Ubuntu.
https://bugs.launchpad.net/bugs/769054

Title:
  CVE-2011-1589: path traversal security vulnerability