CERT mailing list archives

Current Activity - WordPress.org has released WordPress 3.0.4


From: Current Activity <us-cert () us-cert gov>
Date: Mon, 3 Jan 2011 08:22:39 -0500

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

US-CERT Current Activity

WordPress.org has released WordPress 3.0.4

Original release date: January 3, 2011 at 8:10 am
Last revised: January 3, 2011 at 8:10 am


WordPress.org has released WordPress 3.0.4 to address a vulnerability
in the HTML sanitation library. Exploitation of this vulnerability may
allow an attacker to insert arbitrary HTML and script code into the
browser session.

US-CERT encourages users and administrators to review the
WordPress.org blog entry and apply any necessary updates to help
mitigate the risks.

Relevant Url(s):
<http://wordpress.org/news/2010/12/3-0-4-update/>

====
This entry is available at
http://www.us-cert.gov/current/index.html#wordpress_org_has_released_wordpress

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iQEVAwUBTSHNkT6pPKYJORa3AQIk9Af+Kvd7tUgo6FXtOIBh0nu2A1MyOaNNkBk0
XsthCnX79Mny58BLg/lh6G6ECcIZa6ozzJ58XYdgu2AouJm/DEVa4Cw48bIW6OYX
clmQU/WhxdbjRDl8igBxKyixsgv75Qw2JbQJRV0HyRjVXD85wXlRBFo+kVJFlVQN
Z9+l0euDVtPBsetsQU1m477U0icxeeUAxsCFdRcASzdIdyOlOiJPuukphZwr/9+u
8P4lp2NqyZMq9fAMYd3Ak78zTbiTpXLNIwiSC5NmWSR92x2I1ppruXoaPsFCE30r
gR2HbiuWXtyQDpapzN1L2Vti0NhABng7OtouJKhUToNumY+Ni3zJ0g==
=nbw6
-----END PGP SIGNATURE-----


Current thread: