Bug#698481: mantis: multiple XSS vulnerabilities

2013-01-21 Thread Salvatore Bonaccorso
Hi Small followup: http://marc.info/?l=oss-security&m=135876600302683&w=2 Damien Regad mentions there that CVE-2013-0197 is also only affecting 1.2.12. Regards, Salvatore -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listm

Bug#698481: mantis: multiple XSS vulnerabilities

2013-01-18 Thread Salvatore Bonaccorso
Package: mantis Severity: grave Tags: security Justification: user security hole -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi Some vulnerabilities in mantis where reported: [1]: http://www.mantisbt.org/bugs/view.php?id=15373 (CVE-2013-0197) http://marc.info/?l=oss-security&m=135853