UbuntuUpdates.org

Package "yaws"

Name: yaws

Description:

High performance HTTP 1.1 webserver written in Erlang

Latest version: 1.92-1
Release: precise (12.04)
Level: base
Repository: universe
Homepage: http://yaws.hyber.org/

Links


Download "yaws"


Other versions of "yaws" in Precise

No other version of this package is available in the Precise release.

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: *DELETED* 2012-03-06 11:24:35 UTC
No changelog for deleted or moved packages.

Version: 1.92-1 2012-02-16 18:03:20 UTC

yaws (1.92-1) unstable; urgency=low

  * New upstream release.
  * Removed patches which fix directory traversal bug and loading external
    drivers for Erlang R15B because they are included into this upstream
    release.
  * Added a few more fixes for compatibility with Erlang R15B.
  * Removed patch which uses external mime.types.
  * Added a patch which fixes CVE-2011-5025 in the yaws-wiki package
    (closes: #653966).
  * Copied acceptor_pool_size option to yaws.conf from the upstream config.

 -- Sergei Golovan Wed, 18 Jan 2012 09:46:18 +0400

Source diff to previous version
653966 yaws cross site scripting - Debian Bug report logs
CVE-2011-5025 Multiple cross-site scripting (XSS) vulnerabilities in the wiki application in Yaws 1.88 allow remote attackers to inject arbitrary web script or HTML

Version: 1.91-2 2011-12-18 17:04:36 UTC

yaws (1.91-2) unstable; urgency=high

  * Added patch by Uwe Dauernheim which fixes directory traversal bug
    (closes: #650009).

 -- Sergei Golovan Sat, 26 Nov 2011 19:34:12 +0400

650009 yaws vulnerable to directory traversal using ..\\ - Debian Bug report logs

Version: *DELETED* 2011-12-18 14:43:11 UTC
No changelog for deleted or moved packages.



About   -   Send Feedback to @ubuntu_updates