----------------------------------------------------------------------

Hardcore Disassembler / Reverse Engineer Wanted!

Want to work with IDA and BinDiff?
Want to write PoC's and Exploits?

Your nationality is not important.
We will get you a work permit, find an apartment, and offer a
relocation compensation package.

http://secunia.com/hardcore_disassembler_and_reverse_engineer/

----------------------------------------------------------------------

TITLE:
Debian update for trac

SECUNIA ADVISORY ID:
SA21534

VERIFY ADVISORY:
http://secunia.com/advisories/21534/

CRITICAL:
Less critical

IMPACT:
Cross Site Scripting, Exposure of sensitive information

WHERE:
>From remote

OPERATING SYSTEM:
Debian GNU/Linux unstable alias sid
http://secunia.com/product/530/
Debian GNU/Linux 3.1
http://secunia.com/product/5307/

DESCRIPTION:
Debian has issued an update for trac. This fixes a vulnerability,
which can be exploited by malicious users to conduct script insertion
attacks and disclose sensitive information.

For more information:
SA20958

SOLUTION:
Apply updated packages.

-- Debian GNU/Linux 3.1 alias sarge --

Source archives:

http://security.debian.org/pool/updates/main/p/python-docutils/python-docutils_0.3.7-2sarge1.dsc
Size/MD5 checksum: 777 34aa13e1031f1aa26b9dee81a589c5ea
http://security.debian.org/pool/updates/main/p/python-docutils/python-docutils_0.3.7-2sarge1.diff.gz
Size/MD5 checksum: 30438 52144273352f410be37bcedf90241a54
http://security.debian.org/pool/updates/main/p/python-docutils/python-docutils_0.3.7.orig.tar.gz
Size/MD5 checksum: 679649 e0713c07d766cec04b7a36047dac558c

http://security.debian.org/pool/updates/main/t/trac/trac_0.8.1-3sarge5.dsc
Size/MD5 checksum: 656 9294e113a8875efb049442aac4a0f378
http://security.debian.org/pool/updates/main/t/trac/trac_0.8.1-3sarge5.diff.gz
Size/MD5 checksum: 13250 e00671c1f4203a5c93fba3f686a7dc1b
http://security.debian.org/pool/updates/main/t/trac/trac_0.8.1.orig.tar.gz
Size/MD5 checksum: 236791 1b6c44fae90c760074762b73cdc88c8d

Architecture independent components:

http://security.debian.org/pool/updates/main/p/python-docutils/python-docutils_0.3.7-2sarge1_all.deb
Size/MD5 checksum: 614676 859beee07adfd84da242a5c47f1209fe
http://security.debian.org/pool/updates/main/p/python-docutils/python-roman_0.3.7-2sarge1_all.deb
Size/MD5 checksum: 9942 3547f270109d5827073ba964f32863b8
http://security.debian.org/pool/updates/main/p/python-docutils/python2.1-difflib_0.3.7-2sarge1_all.deb
Size/MD5 checksum: 21000 8e265bcf42aa1a01c694bacc62010692
http://security.debian.org/pool/updates/main/p/python-docutils/python2.1-textwrap_0.3.7-2sarge1_all.deb
Size/MD5 checksum: 9616 0a2c510802b0f97fc0289e1b968e3da1
http://security.debian.org/pool/updates/main/p/python-docutils/python2.2-docutils_0.3.7-2sarge1_all.deb
Size/MD5 checksum: 4120 2ffb02ad0c4f8640a85f61182cd2a4d5
http://security.debian.org/pool/updates/main/p/python-docutils/python2.2-textwrap_0.3.7-2sarge1_all.deb
Size/MD5 checksum: 9614 d4f027f3eb69b465518ecc332fd1a0b6
http://security.debian.org/pool/updates/main/p/python-docutils/python2.3-docutils_0.3.7-2sarge1_all.deb
Size/MD5 checksum: 4096 2824761a0ee91eee5bd6b09046962f01
http://security.debian.org/pool/updates/main/p/python-docutils/python2.4-docutils_0.3.7-2sarge1_all.deb
Size/MD5 checksum: 4096 101eff5703e7627f83e2548ba0c9f1cb

http://security.debian.org/pool/updates/main/t/trac/trac_0.8.1-3sarge5_all.deb
Size/MD5 checksum: 198722 243326446e719c452efdda55bd976159

-- Debian GNU/Linux unstable alias sid --

Fixed in version 0.9.6-1.

ORIGINAL ADVISORY:
http://www.us.debian.org/security/2006/dsa-1152

OTHER REFERENCES:
SA20958:
http://secunia.com/advisories/20958/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------