Bug 14334 - CVE-2008-0564 Cross Site Scripting
Summary: CVE-2008-0564 Cross Site Scripting
Status: CLOSED FIXED
Alias: None
Product: Sisyphus
Classification: Development
Component: mailman (show other bugs)
Version: unstable
Hardware: all Linux
: P2 normal
Assignee: Konstantin A Lepikhov (L.A. Kostis)
QA Contact: qa-sisyphus
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2008-02-06 08:25 MSK by Vladimir V. Kamarzin
Modified: 2008-02-28 15:37 MSK (History)
2 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Vladimir V. Kamarzin 2008-02-06 08:25:30 MSK 
http://secunia.com/advisories/28794/
Comment 1 Michael Shigorin 2008-02-20 13:44:17 MSK 
ping?
Comment 2 Vladimir V. Kamarzin 2008-02-25 10:08:32 MSK 
В Sisyphus пофиксено, а что насчёт бранча?

mailman - Mailing list manager with built in web access
* Sat Feb 23 2008 Grigory Batalov <bga@altlinux> 5:2.1.10-alt0.3
- New upstream release (2.1.10 beta 3).
- Contains CVE-2008-0564 fix.
* Fri Mar 30 2007 Grigory Batalov <bga@altlinux> 5:2.1.9-alt6
Note: changelog entry for 5:2.1.9-alt6.1 not found.
Comment 3 Vladimir V. Kamarzin 2008-02-25 10:26:23 MSK 
Ага, там тоже.