Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 545
Alerts This Week
Warning Icon 1 545

Debian: DSA-2522-1 Critical: FCKeditor Cross Site Scripting Issue

debian
Calendar Grey August 6, 2012
Scroller Debian
Security vulnerability patched in FCKeditor for Debian stable, testing, and unstable variants. Immediate upgrade advised.
Emilio Pinna discovered a cross site scripting vulnerability in the spellchecker.php page of FCKeditor, a popular html/text editor for the web
Topics%20covered

Topics Covered

security advisory update critical debian cross site scripting remote fckeditor

Summary

Emilio Pinna discovered a cross site scripting vulnerability in the
spellchecker.php page of FCKeditor, a popular html/text editor for the web.

For the stable distribution (squeeze), this problem has been fixed in
version 1:2.6.6-1squeeze1.

For the testing distribution (wheezy), this problem has been fixed in
version 1:2.6.6-3.

For the unstable distribution (sid), this problem has been fixed in
version 1:2.6.6-3.

We recommend that you upgrade your fckeditor packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: fckeditor
CVE ID: CVE-2012-4000

Topics%20covered

Topics Covered

security advisory update critical debian cross site scripting remote fckeditor

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.