• info
• discussion
• exploit
• solution
• references

Zope Docutils Information Disclosure Vulnerability

Solution:
The vendor has released a fix to address this issue.

Please see the references for vendor advisories and more information.


Zope Zope 2.7.5

• Debian zope2.7_2.7.5-2sarge2_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2 sarge2_alpha.deb


• Debian zope2.7_2.7.5-2sarge2_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2 sarge2_amd64.deb


• Debian zope2.7_2.7.5-2sarge2_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2 sarge2_arm.deb


• Debian zope2.7_2.7.5-2sarge2_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2 sarge2_hppa.deb


• Debian zope2.7_2.7.5-2sarge2_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2 sarge2_i386.deb


• Debian zope2.7_2.7.5-2sarge2_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2 sarge2_ia64.deb


• Debian zope2.7_2.7.5-2sarge2_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2 sarge2_m68k.deb


• Debian zope2.7_2.7.5-2sarge2_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2 sarge2_mips.deb


• Debian zope2.7_2.7.5-2sarge2_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2 sarge2_mipsel.deb


• Debian zope2.7_2.7.5-2sarge2_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2 sarge2_powerpc.deb


• Debian zope2.7_2.7.5-2sarge2_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2 sarge2_s390.deb


• Debian zope2.7_2.7.5-2sarge2_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2 sarge2_sparc.deb

Zope Zope 2.8.1

• Ubuntu zope2.8-sandbox_2.8.1-5ubuntu0.2_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/z/zope2.8/zope2.8-sandbox_ 2.8.1-5ubuntu0.2_all.deb


• Ubuntu zope2.8_2.8.1-5ubuntu0.2_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/z/zope2.8/zope2.8_2.8.1-5u buntu0.2_amd64.deb


• Ubuntu zope2.8_2.8.1-5ubuntu0.2_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/z/zope2.8/zope2.8_2.8.1-5u buntu0.2_i386.deb


• Ubuntu zope2.8_2.8.1-5ubuntu0.2_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/z/zope2.8/zope2.8_2.8.1-5u buntu0.2_powerpc.deb


• Ubuntu zope2.8_2.8.1-5ubuntu0.2_sparc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/z/zope2.8/zope2.8_2.8.1-5u buntu0.2_sparc.deb