Accepted:
OK: gnatsweb_4.00.orig.tar.gz
OK: gnatsweb_4.00-1.1.diff.gz
OK: gnatsweb_4.00-1.1.dsc
-> Component: universe Section: devel
Origin: Debian/unstable
Format: 1.7
Date: Tue, 09 Oct 2007 15:07:58 +0100
Source: gnatsweb
Binary: gnatsweb
Architecture: source
Version: 4.00-1.1
Distribution: gutsy
Urgency: high
Maintainer: Chad Walstrom <[EMAIL PROTECTED]>
Changed-By: Michael Bienia <[EMAIL PROTECTED]>
Description:
gnatsweb - Web interface to GNU GNATS
Closes: 427156
Changes:
gnatsweb (4.00-1.1) unstable; urgency=high
.
* Non-maintainer upload by testing security team.
* Fixed missing escaping of the database parameter which leads
to a cross-site scripting vulnerability (XSS) via this
parameter (CVE-2007-2808) (Closes: # 427156).
Files:
dd21e624e50358a98df96640e8c34d91 2417 devel extra gnatsweb_4.00-1.1.diff.gz
63358364e415f98c5367add70a6af1bf 560 devel extra gnatsweb_4.00-1.1.dsc
--
gutsy-changes mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/gutsy-changes
