Debian: DSA-1560-1 Critical: Cross-Site Scripting in Kronolith2
debian
April 28, 2008
"The-0utl4w" discovered that the Kronolith, calendar component for
the Horde Framework, didn't properly sanitise URL input, leading to
a cross-site scripting vulnerability in the...
Summary
The unstable distribution (sid) will be fixed soon.
We recommend that you upgrade your kronolith2 package.
Upgrade instructions
- --------------------wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.
If you are using the apt-get package manager, use the line for
sources.list as given below:
apt-get update
will update the internal database
apt-get upgrade
will install corrected packages
You may use an automated update by adding the resources from the
footer to the proper configuration.
Debian GNU/Linux 4.0 alias etch
Size/MD5 checksum: 988 bed4712a2341c3a5043c6e69ad6e8309
Size/MD5 checksum: 5388 580890a3d47459f77dd89aa664ca4a44
Size/MD5 checksum: 1691114 df6d6fc99012865b18b089212c7544ad
Architecture independent packages:
Size/MD5 checksum: 1694916 d93492c52a99397b76f862705b7fd24e
These files will probably be moved into the stable distribution on
its next update.
...
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!