Hi there seems to be an additional XSS fixed affecting the 1.2.x branch (not checked):
[1]: http://mantisbt.org/bugs/view.php?id=15416 and also [2] (but seems present only in 1.2.13). [2]: http://mantisbt.org/bugs/view.php?id=15415 Regards, Salvatore -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org