[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: phppgadmin multiple XSS (CVE-2011-3598)



Re: Moritz Muehlenhoff 2012-01-04 <20120104171956.GA4503@inutil.org>
> > > Can you also assess whether (old)stable are affected, and if so, provide
> > > packages? If not (affected or able), do let us know aswell.
> > > 
> > > In any case, please mention CVE-2011-3598 in your changelogs.
> > 
> > https://secunia.com/advisories/46248/ says "prior versions" are
> > affected, so yes.
> > 
> > The relevant diff parts are:
> 
> Apparently this fell through the cracks. :-/
> 
> The impact of this issue is rather minor. Could you please fix this in 
> the upcoming 6.0.4 point release for Squeeze?
> http://www.debian.org/doc/manuals/developers-reference/pkgs.html#upload-stable

Hi,

I'm not sure I still have the squeeze/lenny packages I uploaded to
security-master. Could you push them to ftp-master?

Christoph
-- 
cb@df7cb.de | http://www.df7cb.de/

Attachment: signature.asc
Description: Digital signature


Reply to: