drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Cross-Site Scripting in websvn
Name: |
Cross-Site Scripting in websvn |
|
ID: |
DSA-3572-1 |
|
Distribution: |
Debian |
|
Plattformen: |
Debian jessie |
|
Datum: |
Di, 10. Mai 2016, 00:03 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1236 |
|
Applikationen: |
websvn |
|
Originalnachricht |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512
- ------------------------------------------------------------------------- Debian Security Advisory DSA-3572-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso May 09, 2016 https://www.debian.org/security/faq - -------------------------------------------------------------------------
Package : websvn CVE ID : CVE-2016-1236
Nitin Venkatesh discovered that websvn, a web viewer for Subversion repositories, is susceptible to cross-site scripting attacks via specially crafted file and directory names in repositories.
For the stable distribution (jessie), this problem has been fixed in version 2.3.3-1.2+deb8u2.
We recommend that you upgrade your websvn packages.
Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1
iQIcBAEBCgAGBQJXMNiCAAoJEAVMuPMTQ89Er2kP/1F1g4/MR7YKLjZRc8/xJtIy C8mrTHGfcfRSxEDcSl4RioWS1RUDCES6ZtW8aNFEvyrwqwzHPY3ATaDD2Y+FyUXb 8qfCD13cR0YCNbwJkiWGm9JkXULD2fMO4E+Iy5GpYpfLA7jijq3xs9VngopfT8rQ BW5pdfKb1klQw6nO+6QA8jzARVMAV1tQaqA8LmoXnkdm9bh1KnUbx3fhpRtdPEK2 UGK/C4NtlCBmexEFZL4YC1JRrpP27zaWAna3L3QxukAhyPCxD+LcaiZXkRyrvfAR OpgGmF+fwKYV8D4JPrNq/wIngeeK4fFqmuUx4XPFatJ642DcA2U+gRf0w8sj8Wct WhTTRQXGLUjYM+HWwbzkAi6Ma+tlYBKRU1Q1LKxzuHJ1nCaC41yUqVdohnxzvk0g Bd7KnnnM2OygCBWlXP9f/Mc0lMkN2bKvRfym/1yuT4XL3ge6sH98FJssgdAQxYAN Pflzb+b7ODOhKFSr4PmosKc00//1TzZXOnUISTCNsqtGgAyoURR45ajcq34TiwjT ajY+0xL/ld5UJfUh6xv9ZuiXd0sZ5Pbacl31DsjrtdmHLmqmk3qFYObfHOdCumbm a3W0JctrNX8I7DThL5gCNcg2hKMEGD6p6hY3etC9mL7Ez3/XlFrc04I7mjW59FKk i+/vluAGhs4n8yPikzOo =Q6WA -----END PGP SIGNATURE-----
|
|
|
|