Your message dated Sun, 04 May 2008 19:52:22 +0000
with message-id <[EMAIL PROTECTED]>
and subject line Bug#478121: fixed in kronolith2 2.1.4-1etch1
has caused the Debian Bug report #478121,
regarding kronolith2: XSS vulnerability
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [EMAIL PROTECTED]
immediately.)
--
478121: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=478121
Debian Bug Tracking System
Contact [EMAIL PROTECTED] with problems
--- Begin Message ---
Package: kronolith2
Version: 2.1.4-1
Severity: important
Tags: security
The package kronolith2 has XSS vulnerability. See:
http://forum.aria-security.com/showthread.php?t=49
https://bugs.gentoo.org/show_bug.cgi?id=219304
Regards,
--
Gregory Colpart <[EMAIL PROTECTED]> GnuPG:1024D/C1027A0E
Evolix - Informatique et Logiciels Libres http://www.evolix.fr/
--- End Message ---
--- Begin Message ---
Source: kronolith2
Source-Version: 2.1.4-1etch1
We believe that the bug you reported is fixed in the latest version of
kronolith2, which is due to be installed in the Debian FTP archive:
kronolith2_2.1.4-1etch1.diff.gz
to pool/main/k/kronolith2/kronolith2_2.1.4-1etch1.diff.gz
kronolith2_2.1.4-1etch1.dsc
to pool/main/k/kronolith2/kronolith2_2.1.4-1etch1.dsc
kronolith2_2.1.4-1etch1_all.deb
to pool/main/k/kronolith2/kronolith2_2.1.4-1etch1_all.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Gregory Colpart (evolix) <[EMAIL PROTECTED]> (supplier of updated kronolith2
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Sun, 27 Apr 2008 06:13:11 +0200
Source: kronolith2
Binary: kronolith2
Architecture: source all
Version: 2.1.4-1etch1
Distribution: stable-security
Urgency: high
Maintainer: Horde Maintainers <[EMAIL PROTECTED]>
Changed-By: Gregory Colpart (evolix) <[EMAIL PROTECTED]>
Description:
kronolith2 - calendar component for Horde Framework
Closes: 478121
Changes:
kronolith2 (2.1.4-1etch1) stable-security; urgency=high
.
* Fix XSS vulnerability in the add event screen. (Closes: #478121)
Files:
bed4712a2341c3a5043c6e69ad6e8309 988 web optional kronolith2_2.1.4-1etch1.dsc
df6d6fc99012865b18b089212c7544ad 1691114 web optional
kronolith2_2.1.4.orig.tar.gz
580890a3d47459f77dd89aa664ca4a44 5388 web optional
kronolith2_2.1.4-1etch1.diff.gz
d93492c52a99397b76f862705b7fd24e 1694916 web optional
kronolith2_2.1.4-1etch1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iQEVAwUBSBWbdWz0hbPcukPfAQIYcwf7BtRzyN5ib6P3IRfYNtIbYZ7+14H/F/lD
fRFJbFf38mBIOhHmbgpqotzGT0yItCfFn2HRjN6FEg+hRj95i1Zg1bNPc/4oWnSF
LdWne9J0aFv/CgRMXna0PHMzOWVJrAioagW6hfCGWu8KM5NFVrHws6qePaxqmZg5
1rqfJgG31PKNoTS9quZNNPWahdk1L7EqeV7PFn85ECJDPd+hyMdFOvZO7LiwvIkt
niFPmdBT1/zoyR8L4JjCgAL2ufTrWSgj2OUcBLNfkZ7Ty1II99W1CBcCGWcV3S96
QjuPCdhSI37RKQTPLC633iorQ8fIK4jCrd4wtW/YtJWByMxohLKWqQ==
=aI4c
-----END PGP SIGNATURE-----
--- End Message ---
