Description
Unspecified vulnerability in Trac before 0.11.2 allows attackers to cause a denial of service via unknown attack vectors related to "certain wiki markup."
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | trac | 0.11.1-2.1 | — |
| Debian 13 | trac | 0.11.1-2.1 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | trac | < 0.11.2 | 0.11.2 | GHSA-437p-qw95-wqqr |
References
- 32652 third-party-advisory
- ADV-2008-3080 vdb-entry
- 32226 vdb-entry
- trac-wiki-markup-dos(46492) vdb-entry
- http://trac.edgewall.org/wiki/ChangeLog