moin (1.9.3-1ubuntu2.3) precise-security; urgency=medium
* SECURITY UPDATE: XSS in attachment dialogue
- debian/patches/CVE-2016-7146.patch: properly escape page_name in
MoinMoin/action/fckdialog.py.
- CVE-2016-7146
* SECURITY UPDATE: XSS in link dialogue
- debian/patches/CVE-2016-9119.patch: properly escape strings in
MoinMoin/action/fckdialog.py.
- CVE-2016-9119
Date: 2016-11-22 13:10:20.375566+00:00
Changed-By: Marc Deslauriers <[email protected]>
https://launchpad.net/ubuntu/+source/moin/1.9.3-1ubuntu2.3
Sorry, changesfile not available.
--
Precise-changes mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/precise-changes
