Package: movabletype-opensource
Version: 4.3.6+dfsg-1
Severity: grave
Tags: security
Justification: user security hole

As reported in
<http://www.movabletype.org/2011/06/movable_type_511_and_5051_4361_security_updates.html>

Quote:

"Movable Type 5.11, 5.051, 4.361 were released as mandatory security updates. 
These updates resolve multiple vulnerabilities discovered in Movable Type 5.x 
and Movable Type 4.x. All users must upgrade to this latest release 
immediately."

"A remote attacker could create, read or modify the contents in the system 
under certain circumstances."

-- 
Dominic Hargreaves | http://www.larted.org.uk/~dom/
PGP key 5178E2A5 from the.earth.li (keyserver,web,email)



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to