[Secure-testing-team] r13065 - in data: . CVE

Raphael Geissert geissert at debian.org
Thu Oct 22 05:00:49 UTC 2009


Michael Gilbert wrote:
[...]
> @@ -1,3 +1,7 @@
> +CVE-2009-XXXX [chromium: rss xss]
> +     - chromium-browser <itp> (low; bug #520324)
> +     NOTE: http://seclists.org/fulldisclosure/2009/Sep/201
> +     NOTE: other browsers are not affected (only chrome and opera)

Have older versions of iceweasel verified as well? they might have fixed it
recently together with the previous issue regarding XSS attacks on feeds.

Cheers,
-- 
Raphael Geissert - Debian Developer
www.debian.org - get.debian.net





More information about the Secure-testing-team mailing list