Secunia Security Advisory - Debian has issued an update for serendipity. This fixes some vulnerabilities, which can be exploited by malicious people to conduct cross-site scripting and script-insertion attacks or to bypass certain security restrictions.
cfc7b7c423a33f1af3a62dcc4db1f85d42ab0e30f5aec5c0ce46a5e9d2eaf285
----------------------------------------------------------------------
A new version (0.9.0.0 - Release Candidate 1) of the free Secunia PSI
has been released. The new version includes many new and advanced
features, which makes it even easier to stay patched.
Download and test it today:
https://psi.secunia.com/
Read more about this new version:
https://psi.secunia.com/?page=changelog
----------------------------------------------------------------------
TITLE:
Debian update for serendipity
SECUNIA ADVISORY ID:
SA29502
VERIFY ADVISORY:
http://secunia.com/advisories/29502/
CRITICAL:
Moderately critical
IMPACT:
Security Bypass, Cross Site Scripting
WHERE:
>From remote
OPERATING SYSTEM:
Debian GNU/Linux unstable alias sid
http://secunia.com/product/530/
Debian GNU/Linux 4.0
http://secunia.com/product/13844/
DESCRIPTION:
Debian has issued an update for serendipity. This fixes some
vulnerabilities, which can be exploited by malicious people to
conduct cross-site scripting and script-insertion attacks or to
bypass certain security restrictions.
For more information:
SA28012
SA29128
SA29398
SOLUTION:
Apply updated packages.
-- Debian GNU/Linux 4.0 alias etch --
Source archives:
http://security.debian.org/pool/updates/main/s/serendipity/serendipity_1.0.4.orig.tar.gz
Size/MD5 checksum: 3058582 eaf26277af3d864fc3d6bbc6c42a00b7
http://security.debian.org/pool/updates/main/s/serendipity/serendipity_1.0.4-1+etch1.diff.gz
Size/MD5 checksum: 21652 3de75c5011be95ffea76afe72ac2b598
http://security.debian.org/pool/updates/main/s/serendipity/serendipity_1.0.4-1+etch1.dsc
Size/MD5 checksum: 888 2f8a7d7009104ed9c7ca804c7b6a2b15
Architecture independent packages:
http://security.debian.org/pool/updates/main/s/serendipity/serendipity_1.0.4-1+etch1_all.deb
Size/MD5 checksum: 2756036 4b2b44137ed11caacba846c0761204f6
-- Debian GNU/Linux unstable alias sid --
Fixed in version 1.3-1.
ORIGINAL ADVISORY:
http://www.debian.org/security/2008/dsa-1528
OTHER REFERENCES:
SA28012:
http://secunia.com/advisories/28012/
SA29128:
http://secunia.com/advisories/29128/
SA29398:
http://secunia.com/advisories/29398/
----------------------------------------------------------------------
About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.
Subscribe:
http://secunia.com/secunia_security_advisories/
Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/
Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.
----------------------------------------------------------------------