Zope RestructuredText File Include Vulnerability

Zope RestructuredText File Include Vulnerability

Solution:

The vendor has released a patch to resolve this issue; please see the fix information provided with this BID.

Please see the referenced advisories for more information.

Zope Zope 2.6 .0b1

Zope Hotfix_2005-10-09.tar.gz
http://www.zope.org/Products/Zope/Hotfix_2005-10-09/security_alert/Hot fix_2005-10-09.tar.gz

Zope Zope 2.6.1

Zope Hotfix_2005-10-09.tar.gz
http://www.zope.org/Products/Zope/Hotfix_2005-10-09/security_alert/Hot fix_2005-10-09.tar.gz

Zope Zope 2.6.2

Zope Hotfix_2005-10-09.tar.gz
http://www.zope.org/Products/Zope/Hotfix_2005-10-09/security_alert/Hot fix_2005-10-09.tar.gz

Zope Zope 2.6.3

Zope Hotfix_2005-10-09.tar.gz
http://www.zope.org/Products/Zope/Hotfix_2005-10-09/security_alert/Hot fix_2005-10-09.tar.gz

Zope Zope 2.7 .0 BETA4

Zope Hotfix_2005-10-09.tar.gz
http://www.zope.org/Products/Zope/Hotfix_2005-10-09/security_alert/Hot fix_2005-10-09.tar.gz

Zope Zope 2.7 .0 BETA1

Debian zope2.7_2.7.5-2sarge1_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2 sarge1_alpha.deb

Debian zope2.7_2.7.5-2sarge1_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2 sarge1_amd64.deb

Debian zope2.7_2.7.5-2sarge1_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2 sarge1_arm.deb

Debian zope2.7_2.7.5-2sarge1_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2 sarge1_hppa.deb

Debian zope2.7_2.7.5-2sarge1_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2 sarge1_i386.deb

Debian zope2.7_2.7.5-2sarge1_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2 sarge1_ia64.deb

Debian zope2.7_2.7.5-2sarge1_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2 sarge1_m68k.deb

Debian zope2.7_2.7.5-2sarge1_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2 sarge1_mips.deb

Debian zope2.7_2.7.5-2sarge1_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2 sarge1_mipsel.deb

Debian zope2.7_2.7.5-2sarge1_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2 sarge1_powerpc.deb

Debian zope2.7_2.7.5-2sarge1_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2 sarge1_s390.deb

Debian zope2.7_2.7.5-2sarge1_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2 sarge1_sparc.deb

Debian zope2.7_2.7.5-2sarge1_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2 sarge1_alpha.deb

Debian zope2.7_2.7.5-2sarge1_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2 sarge1_amd64.deb

Debian zope2.7_2.7.5-2sarge1_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2 sarge1_arm.deb

Debian zope2.7_2.7.5-2sarge1_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2 sarge1_hppa.deb

Debian zope2.7_2.7.5-2sarge1_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2 sarge1_i386.deb

Debian zope2.7_2.7.5-2sarge1_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2 sarge1_ia64.deb

Debian zope2.7_2.7.5-2sarge1_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2 sarge1_m68k.deb

Debian zope2.7_2.7.5-2sarge1_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2 sarge1_mips.deb

Debian zope2.7_2.7.5-2sarge1_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2 sarge1_mipsel.deb

Debian zope2.7_2.7.5-2sarge1_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2 sarge1_powerpc.deb

Debian zope2.7_2.7.5-2sarge1_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2 sarge1_s390.deb

Debian zope2.7_2.7.5-2sarge1_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2 sarge1_sparc.deb

Zope Hotfix_2005-10-09.tar.gz
http://www.zope.org/Products/Zope/Hotfix_2005-10-09/security_alert/Hot fix_2005-10-09.tar.gz

Zope Zope 2.7 .0 BETA2

Zope Hotfix_2005-10-09.tar.gz
http://www.zope.org/Products/Zope/Hotfix_2005-10-09/security_alert/Hot fix_2005-10-09.tar.gz

Zope Zope 2.7 .0 BETA3

Zope Hotfix_2005-10-09.tar.gz
http://www.zope.org/Products/Zope/Hotfix_2005-10-09/security_alert/Hot fix_2005-10-09.tar.gz

Zope Zope 2.8.1

Ubuntu zope2.8-sandbox_2.8.1-5ubuntu0.1_all.deb
Ubuntu 5.10 (Breezy Badger)
http://security.ubuntu.com/ubuntu/pool/main/z/zope2.8/zope2.8-sandbox_ 2.8.1-5ubuntu0.1_all.deb

Ubuntu zope2.8_2.8.1-5ubuntu0.1_amd64.deb
Ubuntu 5.10 (Breezy Badger)
http://security.ubuntu.com/ubuntu/pool/main/z/zope2.8/zope2.8_2.8.1-5u buntu0.1_amd64.deb

Ubuntu zope2.8_2.8.1-5ubuntu0.1_i386.deb
Ubuntu 5.10 (Breezy Badger)
http://security.ubuntu.com/ubuntu/pool/main/z/zope2.8/zope2.8_2.8.1-5u buntu0.1_i386.deb

Ubuntu zope2.8_2.8.1-5ubuntu0.1_powerpc.deb
Ubuntu 5.10 (Breezy Badger)
http://security.ubuntu.com/ubuntu/pool/main/z/zope2.8/zope2.8_2.8.1-5u buntu0.1_powerpc.deb

Zope Hotfix_2005-10-09.tar.gz
http://www.zope.org/Products/Zope/Hotfix_2005-10-09/security_alert/Hot fix_2005-10-09.tar.gz