[security] twiki allows remote attackers to execute arbitrary Perl code (CVE-2008-5305)

[Brian Thomason]

Binary package hint: twiki

Eval injection vulnerability in TWiki before 4.2.4 allows remote attackers to execute arbitrary Perl code via the %SEARCH{}% variable.

[Steve Beattie (sbeattie)]

Hi Brian,

Thanks for helping to improve Ubuntu by providing these debdiffs. I've reviewed them and uploaded the packages to the ppa:ubuntu-security-proposed/ppa to build. Once they're built, please test and provide feedback here.

One minor nit that I had with the patches was that even with dpatch style patches, we prefer that the header to contain relevant DEP-3 tags as outlined at http://dep.debian.net/deps/dep/.

[Marking this bug report public as the issue is not embargoed.]

[Steve Beattie (sbeattie)]

Sorry, the link for the ppa is https://launchpad.net/~ubuntu-security-proposed/+archive/ppa (I'd hoped launchpad would expand the ppa:blah/blah shortcut).

[Kees Cook (kees)]

Pocket copied twiki to proposed. Please test and give feedback here. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Thank you in advance!

To ubuntu-sru: if this passes the verification process, please also pocket copy to security. Thanks!

[Pedro Villavicencio (pedro)]

I've verified the proposed package following the test case available at the twiki website: http://www.twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2008-5305 and can confirm that the proposed package indeed fixes the bug for both releases (Hardy,Karmic). Marking this as verification-done, Thanks all.

[Launchpad Janitor (janitor)]

This bug was fixed in the package twiki - 1:4.1.2-3.1ubuntu1.1

---------------
twiki (1:4.1.2-3.1ubuntu1.1) hardy-security; urgency=low

  * SECURITY UPDATE: Fix bug which allows remote attackers to execute arbitrary
    Perl code. (LP: #709401)
    - debian/patches/002_CVE-2008-5305.dpatch: patch derived from upstream
      hotfix
    - CVE-2008-5305
 -- Brian Thomason <email address hidden> Fri, 28 Jan 2011 13:26:20 -0500

[Launchpad Janitor (janitor)]

This bug was fixed in the package twiki - 1:4.1.2-5ubuntu1.1

---------------
twiki (1:4.1.2-5ubuntu1.1) karmic-security; urgency=low

  * SECURITY UPDATE: Fix bug which allows remote attackers to execute arbitrary
    Perl code. (LP: #709401)
    - debian/patches/006_CVE-2008-5305.dpatch: patch derived from upstream
      hotfix
    - CVE-2008-5305
 -- Brian Thomason <email address hidden> Fri, 28 Jan 2011 13:44:28 -0500