Steve McIntyre
2011-Sep-30 17:03 UTC
[Secure-testing-team] Bug#643904: CVE-2011-1058: XSS vulnerability in the rst parser
Package: moin Version: 1.9.3-2 Severity: serious Tags: security patch As already mentioned at http://security-tracker.debian.org/tracker/CVE-2011-1058 there''s a cross-site scripting vulnerability in the rst parser. Simple patch at http://hg.moinmo.in/moin/1.9/rev/97208f67798f. -- System Information: Debian Release: 6.0.2 APT prefers stable APT policy: (500, ''stable'') Architecture: amd64 (x86_64) Kernel: Linux 2.6.32-5-amd64 (SMP w/2 CPU cores) Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash