23679 – security bug in dev-python/twisted < 1.0.5

Bug 23679 - security bug in dev-python/twisted < 1.0.5

Summary: security bug in dev-python/twisted < 1.0.5

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	Current packages (show other bugs)
Hardware:	All Linux

Importance:	High critical (vote)
Assignee:	Gentoo Security

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Thomas Raschbacher gentoo-dev

2003-06-29 01:59:57 UTC

when using t.web it's possible to get any file readable by the webserver process

Reproducible: Always
Steps to Reproduce:

Comment 1 Thomas Raschbacher gentoo-dev

2003-06-29 02:00:31 UTC

1.0.6 has the fix

Comment 2 Thomas Raschbacher gentoo-dev

2003-08-25 22:55:44 UTC

twisted < 1.0.6 is not in portage anymore (for quite a while now)