From:
[email protected]
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- ------------------------------------------------------------------------- Debian Security Advisory DSA-3572-1
[email protected] https://www.debian.org/security/ Salvatore Bonaccorso
May 09, 2016
https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : websvn
CVE ID : CVE-2016-1236
Nitin Venkatesh discovered that websvn, a web viewer for Subversion repositories, is susceptible to cross-site scripting attacks via
specially crafted file and directory names in repositories.
For the stable distribution (jessie), this problem has been fixed in
version 2.3.3-1.2+deb8u2.
We recommend that you upgrade your websvn packages.
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at:
https://www.debian.org/security/
Mailing list:
[email protected]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQIcBAEBCgAGBQJXMNiCAAoJEAVMuPMTQ89Er2kP/1F1g4/MR7YKLjZRc8/xJtIy C8mrTHGfcfRSxEDcSl4RioWS1RUDCES6ZtW8aNFEvyrwqwzHPY3ATaDD2Y+FyUXb 8qfCD13cR0YCNbwJkiWGm9JkXULD2fMO4E+Iy5GpYpfLA7jijq3xs9VngopfT8rQ BW5pdfKb1klQw6nO+6QA8jzARVMAV1tQaqA8LmoXnkdm9bh1KnUbx3fhpRtdPEK2 UGK/C4NtlCBmexEFZL4YC1JRrpP27zaWAna3L3QxukAhyPCxD+LcaiZXkRyrvfAR OpgGmF+fwKYV8D4JPrNq/wIngeeK4fFqmuUx4XPFatJ642DcA2U+gRf0w8sj8Wct WhTTRQXGLUjYM+HWwbzkAi6Ma+tlYBKRU1Q1LKxzuHJ1nCaC41yUqVdohnxzvk0g Bd7KnnnM2OygCBWlXP9f/Mc0lMkN2bKvRfym/1yuT4XL3ge6sH98FJssgdAQxYAN Pflzb+b7ODOhKFSr4PmosKc00//1TzZXOnUISTCNsqtGgAyoURR45ajcq34TiwjT ajY+0xL/ld5UJfUh6xv9ZuiXd0sZ5Pbacl31DsjrtdmHLmqmk3qFYObfHOdCumbm a3W0JctrNX8I7DThL5gCNcg2hKMEGD6p6hY3etC9mL7Ez3/XlFrc04I7mjW59FKk i+/vluAGhs4n8yPikzOo
=Q6WA
-----END PGP SIGNATURE-----
--- SoupGate-Win32 v1.05
* Origin: you cannot sedate... all the things you hate (1:229/2)