Bugtraq mailing list archives

Re: [RHSA-2001:162-04] Updated namazu packages are available


From: knok () daionet gr jp (NOKUBI Takatsugu)
Date: Thu, 27 Dec 2001 15:45:57 JST

In article <200112250305.fBP35Wr26855 () porkchop redhat com>
bugzilla () redhat com writes:

3. Problem description:

namazu may inadvertently include malicious HTML tags or script in a
dynamically generated page based on unvalidated input from untrustworthy
sources.

The issue is still exist on Namazu 2.0.9... Namazu Project was
released 2.0.10, I recomment to use it.
-- 
NOKUBI Takatsugu
E-mail: knok () daionet gr jp
        knok () namazu org / knok () debian org


Current thread: