Bug#1059289: bullseye-pu: package spip/3.2.11-3+deb11u10
Hi,
On Fri, Dec 22, 2023 at 01:21:56PM +0100, David Prévot wrote:
> Package: release.debian.org
> Severity: normal
> Tags: bullseye
> User: release.debian.org@packages.debian.org
> Usertags: pu
> X-Debbugs-Cc: spip@packages.debian.org, team@security.debian.org
> Control: affects -1 + src:spip
>
> Another upstream release fixed a security (XSS) issue. The last two
> updates of this kind didn’t warrant a DSA, so I guess this one will not
> warrant one either (security team X-D-CCed in case I’m wrong).
To confirm, from security team perspective, this does not warrant a
DSA and can be fixed in the upcoming point release.
Regards,
Salvatore
Reply to: