-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Sat, 06 Oct 2007 15:03:47 +0200 Source: gnatsweb Binary: gnatsweb Architecture: source all Version: 4.00-1.1 Distribution: unstable Urgency: high Maintainer: Chad Walstrom <chewie@debian.org> Changed-By: Nico Golde <nion@debian.org> Description: gnatsweb - Web interface to GNU GNATS Closes: 427156 Changes: gnatsweb (4.00-1.1) unstable; urgency=high . * Non-maintainer upload by testing security team. * Fixed missing escaping of the database parameter which leads to a cross-site scripting vulnerability (XSS) via this parameter (CVE-2007-2808) (Closes: # 427156). Files: 63358364e415f98c5367add70a6af1bf 560 devel extra gnatsweb_4.00-1.1.dsc dd21e624e50358a98df96640e8c34d91 2417 devel extra gnatsweb_4.00-1.1.diff.gz d9baa962037c5869b55e5610d8c6b2de 55626 devel extra gnatsweb_4.00-1.1_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFHCfqgHYflSXNkfP8RAi6jAKCE8YwiOXvz2Uxn/6W8e1qyx5fECACghu0Z 3F1Tkz4ni2vy6n2YUXURcas= =7JR5 -----END PGP SIGNATURE----- Accepted: gnatsweb_4.00-1.1.diff.gz to pool/main/g/gnatsweb/gnatsweb_4.00-1.1.diff.gz gnatsweb_4.00-1.1.dsc to pool/main/g/gnatsweb/gnatsweb_4.00-1.1.dsc gnatsweb_4.00-1.1_all.deb to pool/main/g/gnatsweb/gnatsweb_4.00-1.1_all.deb
