Bug#555608: CVE-2009-3300

2009-11-10 Thread Russ Allbery
Giuseppe Iuculano writes: > the following CVE (Common Vulnerabilities & Exposures) id was > published for shibboleth-sp2. > CVE-2009-3300[0]: > | Multiple cross-site scripting (XSS) vulnerabilities in the Identity > | Provider (IdP) 1.3.x before 1.3.4 and 2.x before 2.1.5, and the > | Service Pr

Bug#555608: CVE-2009-3300

2009-11-10 Thread Giuseppe Iuculano
Package: shibboleth-sp2 Severity: serious Tags: security -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, the following CVE (Common Vulnerabilities & Exposures) id was published for shibboleth-sp2. CVE-2009-3300[0]: | Multiple cross-site scripting (XSS) vulnerabilities in the Identity | Provid