-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2574-1 security@debian.org http://www.debian.org/security/ November 15, 2012 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : typo3-src Vulnerability : several Problem type : remote Debian-specific: no Several vulnerabilities were discovered in TYPO3, a content management system. This update addresses cross-site scripting, SQL injection, and information disclosure vulnerabilities and corresponds to TYPO3-CORE-SA-2012-005. For the stable distribution (squeeze), this problem has been fixed in version 4.3.9+dfsg1-1+squeeze7. For the unstable distribution (sid), this problem has been fixed in version 4.5.19+dfsg1-4. We recommend that you upgrade your typo3-src packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: http://www.debian.org/security/ Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAEBAgAGBQJQpWJiAAoJEL97/wQC1SS+srIIAJu7qMpYBGgO4OndyjKIxR7O 8O+lxpzrXvEOPfA0EZ8Kqc/VzD4u8UGemaOHWKZRYHuhwZ+6oFhUGdo6ejLQQYcb ENpe41lRBTACUK3fPgLiKG+gJANU9Y8bsSISAqzJ2uONmoMeI5ev7GAsrouJ4lot KXXHdCk9QTlV9BOLD2jbEuO8DVdBM2iy852af2E/UrTPjsozH7AHgpXQjbrV3Ea9 r4Ii40boNkk4LEMJMJSiMmbLVHqV5/pH4xaOwTsX7ASAZsDKqZrVcKIUYNuBjfGP R86hsaxBB4Irj3QuAkUqxTJn9iBaC51zg/h6XLowQVUmVk61oDI4GTfR1JD3rdM= =EajD -----END PGP SIGNATURE-----