[Pkg-graphite-maint] Bug#720454: Bug#720454: graphite-web: CVE-2013-5093: Graphite remote code execution
jonas.genannt at capi2name.de
Thu Aug 22 08:05:59 UTC 2013
I have added the patch to fix a security problem in graphite-web. It's
available in git. Could you please upload graphite-web to unstable?
> Graphite remote code execution
> See the advisory in  and there are either patch for 0.9.10 or
> updating to 0.9.11/0.9.12 (which includes further fixes, see ).
> If you fix the vulnerability please also make sure to include the
> CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
> For further information see:
>  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5093
>  https://gist.github.com/mleinart/6285953 
More information about the Pkg-graphite-maint