Tickets :: Comment on [#14857] Multiple XSS security vulnerabilities

* Your Email Address
* Spam protection	Enter the letters below: ..__ ..___.. . \|[ __ \| _/ \ / \__\|[_./\__\|./__. \/
Comment	> Hi, > > first of all: I'm glad that you solved mentioned bugs. > > In case of 'informing' - I tried. :) Please see attached screen. > > In case of any questions - feel free to ask. > I'll answer as soon as possible (probably during next 24h). > > Best regards, > Cody Sixteen > > > >> This is the first time that I'm seeing these, will investigate. >> >>> Several security vulnerabilities were publicly disclosed. >>> >>> https://code610.blogspot.com/2017/11/rce-via-xss-horde-5219.html >>> >>> They are also known as CVE-2017-16906, CVE-2017-16907, CVE-2017-16908 >>> and CVE-2017-17781. >>> >>> Are you aware of these issues? The bug reporter claims that they are >>> still present in the latest stable release. If you have already fixed >>> them, I would appreciate more information about the concrete fixes >>> because Debian and other Linux distributions would like to fix those >>> issues. >>> >>> Thanks in advance >>> >>> Markus Koschany (apo@debian.org) >> >
Attachment
Watch this ticket