-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi,
upstream has released a fixed version. The spellchecker versions in perl and cfm contains also this vulnerability. I will create fixed packages tomorrow. >> I will try to contact upstream to find a solution. > > And can you check if ckeditor is affected too? I also asked upstream. ckeditor is not affected as i told. All server side stuff was removed in ckeditor. regards, Frank -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.17 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAlAa9GgACgkQWr0A+QOsIlAQgwCdE01u+qa2DDnaa5CtkX/tK9JV 2EgAnRkHtdSHcU6CrV6ZkwyhrjETWEvU =QjUQ -----END PGP SIGNATURE----- -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org