[Secure-testing-team] Lenny security bug sprint

[Dominic Hargreaves]

On Mon, Nov 17, 2008 at 06:55:13AM +0100, Moritz Muehlenhoff wrote:
> I went through all the open Lenny security issues and commented on them
> briefly. If everyone picks two and fixes them (or brings the respective
> maintainter into fixing them :-), we'll have a lot less work post release.

> movabletype-opensource / CVE-2008-4634
>   Upstream says that more issues are coming, no reaction from upstream since 8 Nov 2008
>   Patch for XSS issue is extracted

I'll revisit this this week.

Dominic.

-- 
Dominic Hargreaves | http://www.larted.org.uk/~dom/
PGP key 5178E2A5 from the.earth.li (keyserver,web,email)