Package: gatling Version: 0.12cvs20120114-2 Severity: grave Tags: upstream security Justification: user security hole
gatling 0.12 has two directory traversal vulns (one in the handling of Host headers, one in the ftp code) that have been fixed in Gatling 0.13. -- System Information: Debian Release: wheezy/sid APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.2.0-4-amd64 (SMP w/2 CPU cores) Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages gatling depends on: ii libc6 2.13-35 ii libowfat0 0.28-5 ii libpolarssl0 1.1.4-1 ii libssl1.0.0 1.0.1c-4 ii zlib1g 1:1.2.7.dfsg-13 gatling recommends no packages. gatling suggests no packages. -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org