Your message dated Thu, 6 Oct 2016 19:12:27 +0200
with message-id <[email protected]>
and subject line This was fixed in version 2.5.0
has caused the Debian Bug report #838017,
regarding manila-ui: CVE-2016-6519: persistent XSS in metadata field
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
838017: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=838017
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: manila-ui
Version: 2.1.0-2
Severity: grave
Tags: security upstream patch
Hi,
the following vulnerability was published for manila-ui.
CVE-2016-6519[0]:
persistent XSS in metadata field
[1] and [2] contain both patches.
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
[0] https://security-tracker.debian.org/tracker/CVE-2016-6519
[1] https://bugzilla.redhat.com/show_bug.cgi?id=1375147
[2] https://bugzilla.novell.com/show_bug.cgi?id=988935
Regards,
Salvatore
--- End Message ---
--- Begin Message ---
This was fixed in version 2.5.0, which I uploaded to Sid.
--- End Message ---