Package: serendipity Version: 1.5.3-2 Severity: grave Tags: security patch Hi, A securite problem was reported against serendipity, a XSS in karma plugin: http://seclists.org/oss-sec/2011/q4/176 The id CVE-2011-4090 was assigned to this issue. Don't forget to mention it in your changelog. The patch is available here: https://github.com/s9y/Serendipity/commit/a7861fabd328c3c468f0853355686dd7e39cc4ac#plugins/serendipity_event_karma/serendipity_event_karma.php
Regards, /luciano -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
