moin (1.9.7-1ubuntu2.1) trusty-security; urgency=medium
* SECURITY UPDATE: XSS in attachment dialogue
- debian/patches/CVE-2016-7146.patch: properly escape page_name in
MoinMoin/action/fckdialog.py.
- CVE-2016-7146
* SECURITY UPDATE: XSS in link dialogue
- debian/patches/CVE-2016-9119.patch: properly escape strings in
MoinMoin/action/fckdialog.py.
- CVE-2016-9119
Date: 2016-11-22 13:10:31.191506+00:00
Changed-By: Marc Deslauriers <[email protected]>
https://launchpad.net/ubuntu/+source/moin/1.9.7-1ubuntu2.1
Sorry, changesfile not available.
--
Trusty-changes mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/trusty-changes
