Upgrade to Trac 0.9.6 for dapper (security fixes)

Bug #42564 reported by Laurent CHARTRAIN
This bug report is a duplicate of:  Bug #394290: Trac needs security fixes. Edit Remove
260
Affects Status Importance Assigned to Milestone
trac (Ubuntu)
Fix Released
Medium
Unassigned
Declined for Edgy by William Grant
Dapper
Confirmed
Undecided
Unassigned

Bug Description

The 0.9.4 - 0.9.6 releases resolve several security fixes and lot of bugs. Current version in Dapper is 0.9.3 which has bugs and security vulnerabilities.
Trac changelog: http://projects.edgewall.com/trac/wiki/ChangeLog
Thanks

Revision history for this message
Dennis Kaarsemaker (dennis) wrote :

Rejecting as duplicate

Changed in trac:
status: Unconfirmed → Rejected
Revision history for this message
William Grant (wgrant) wrote :

There are security issues fixed in both 0.9.5 and 0.9.6 which should probably be backported to Dapper. I'm reopening this.

Changed in trac:
status: Rejected → Fix Released
Revision history for this message
reiner (rjung) wrote :

A little confusing that a package like trac which is used from so many open source projects and it is maintained from the Ubuntu Core developer team is not updated where several security problems are fixed. Are there any plans to make a update or any other recommandation.

Rouben (rouben)
description: updated
Revision history for this message
Rouben (rouben) wrote :

Subscribing motu-sru to this bug in order to request a SRU for trac 0.9.6 under dapper. Reason: security fixes. Current release in Dapper repos: 0.9.3, which is vulnerable.

Revision history for this message
StefanPotyra (sistpoty) wrote :

Hi, thanks for the bug report.

subscribing motu-swat and unsubscribing motu-sru: security fixes should go to -security, not to -updates. As a side note: motu-sru is no longer active due to our new StableReleaseUpdates policy. It was only used back then to check the sanity of a proposed update, and thus didn't fix any bugs.

Cheers,
    Stefan.

Revision history for this message
Rouben (rouben) wrote :

Thanks Stefan, for referring this to the SWAT team! Much appreciated!

Rouben (rouben)
Changed in trac:
status: Unconfirmed → Confirmed
Revision history for this message
Rouben (rouben) wrote :

Don't mean to nag, but is there any prospect of this upgrade ever being released to Dapper?

To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.