Comment 2 for bug 200897

Revision history for this message
Jamie Strandboge (jdstrand) wrote :

2007-2423 was fixed in 1.5.7-3 (Dapper and Gutsy also have the fix)
2007-2637 was fixed in 1.5.7-2 and 1.5.8 upstream. While not clear from the changelog, Dapper and Gutsy also have this commit http://hg.moinmo.in/moin/1.5/rev/0e41a0429ee1 (this CVE may have been split after publication)

2008-0780, 2008-0781, 2008-0782: fixed in hardy and later
2008-1098, 2008-1099: fixed in hardy (1.5.8-2) and later

Gutsy and Dapper are affected by 2008-0780, 2008-0781, 2008-0782, 2008-1098, 2008-1099.