drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Ausführen beliebiger Kommandos in spip
Name: |
Ausführen beliebiger Kommandos in spip |
|
ID: |
DSA-4853-1 |
|
Distribution: |
Debian |
|
Plattformen: |
Debian buster |
|
Datum: |
Mi, 17. Februar 2021, 06:23 |
|
Referenzen: |
Keine Angabe |
|
Applikationen: |
SPIP |
|
Originalnachricht |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512
- ------------------------------------------------------------------------- Debian Security Advisory DSA-4853-1 security@debian.org https://www.debian.org/security/ Sebastien Delafond February 16, 2021 https://www.debian.org/security/faq - -------------------------------------------------------------------------
Package : spip
It was discovered that SPIP, a website engine for publishing, would allow a malicious user to perform cross-site scripting attacks, access sensitive information, or execute arbitrary code.
For the stable distribution (buster), this problem has been fixed in version 3.2.4-1+deb10u4.
We recommend that you upgrade your spip packages.
For the detailed security status of spip please refer to its security tracker page at: https://security-tracker.debian.org/tracker/spip
Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE-----
iQEzBAEBCgAdFiEEAqSkbVtrXP4xJMh3EL6Jg/PVnWQFAmArtRcACgkQEL6Jg/PV nWSwTgf/ZeebxmE8OnnCc1UxE/2Ukwr0lLVB3AfX5JcDT5eaFY3jipacdcdAVfnn FfDBIc/S8dLHH8xqq/wLOgVtrKMwGXOILItRe4rDmA2ENCJc/f6OVAvtx7o3I4ar /e1MxMLb+ZK5bgnIfm5J3GiHTMWQ69PodZ1Jd/Hu4plLXVLvO75GGRIOVwdhnLtm MWxc7591tjcdgJetL6HXdqJnljWy5LLIA05vrkKbJWrqax2J0EnwIzGuENkwxqIP VesQyes3sf5BV9dBaoE3wafRLbh7UpwlXfaoRk8wwR27dQ/OXRLhJhe/Of5apgR4 fYLTLN1bwl59vBYhqVHXE2vik/4R8A== =Y96V -----END PGP SIGNATURE-----
|
|
|
|