Accepted:
OK: dokuwiki_0.0.20050922.orig.tar.gz
OK: dokuwiki_0.0.20050922-4ubuntu1.2.diff.gz
OK: dokuwiki_0.0.20050922-4ubuntu1.2.dsc
-> Component: universe Section: web
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Tue, 02 Oct 2007 22:11:02 +0200
Source: dokuwiki
Binary: dokuwiki
Architecture: source
Version: 0.0.20050922-4ubuntu1.2
Distribution: dapper-security
Urgency: low
Maintainer: Matti Pöllä <[EMAIL PROTECTED]>
Changed-By: Luca Falavigna <[EMAIL PROTECTED]>
Description:
dokuwiki - a standards compliant simple to use wiki
Changes:
dokuwiki (0.0.20050922-4ubuntu1.2) dapper-security; urgency=low
.
* SECURITY UPDATE: a XSS vulnerability in DokuWiki's spellchecker
backend could lead to a malicious Javascript execution.
* Add 'debian/patches/11_fix_spellchech.php_xss.dpatch', taken from new
upstream release 2007-06-26b.
* References
http://bugs.splitbrain.org/index.php?do=details&task_id=1195
CVE-2007-3930
Files:
21d2fd9f1c520fb185f3d3aa56793611 624 web optional
dokuwiki_0.0.20050922-4ubuntu1.2.dsc
97910223576fca288b2ca8c1bea144f8 17387 web optional
dokuwiki_0.0.20050922-4ubuntu1.2.diff.gz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFHAr/3H/9LqRcGPm0RAuamAKCPHPrGTG8iLe6x5VNY32owhjbdNwCdFl00
u6lITl8Y+W4rXfuHTrooq5s=
=4dbA
-----END PGP SIGNATURE-----
--
dapper-changes mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/dapper-changes
