wordpress (2.2.2-1ubuntu1.1) gutsy-security; urgency=low
* SECURITY UPDATE: Cross-site scripting due to improper checking of
unfiltered_html privilege. (LP: #138819)
* wp-admin/admin-functions.php: Unset no_filter POST parameter, thus
enforcing checking of privileges. Patch from upstream bug, applied inline.
* References
CVE-2007-4893
-- William Grant <[EMAIL PROTECTED]> Thu, 29 Nov 2007
22:36:34 +1100
** Changed in: wordpress (Ubuntu Gutsy)
Status: Fix Committed => Fix Released
--
wordpress 2.2.3 is out: security release
https://bugs.launchpad.net/bugs/138819
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs