Alerts This Week
Warning Icon 1 666
Alerts This Week
Warning Icon 1 666

Debian 4.0 DSA-1559-1 Critical: phpGedView Cross Site Scripting Issue

debian
Calendar Grey April 27, 2008
Debian Logo
Uncover the solution for the phpGedView cross site scripting vulnerability in Debian as outlined in security advisory DSA-1559-1.
It was discovered that phpGedView, an application to provide online access to genealogical data, performed insufficient input sanitising on some parameters, making it vulnerabl...

Summary


For the unstable distribution (sid), this problem has been fixed in version
4.1.e+4.1.1-2.

We recommend that you upgrade your phpgedview package.

Upgrade instructions
- --------------------wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
will update the internal database
apt-get upgrade
will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian GNU/Linux 4.0 alias etch

Size/MD5 checksum: 6181964 73b1f051f01dcd6520a044badaa40fe6
Size/MD5 checksum: 7845 0ae3d02bf2f9bfecac01bfbb98e16b53
Size/MD5 checksum: 1053 30d7415d993b4034f44fdfcd9bf9d998

Architecture independent packages:

Size/MD5 checksum: 876616 0745d130e09318bd72790028db6a943d
Size/MD5 checksum: 2270996 ce02af3e71b958d0fd...

Read the Full Advisory

Severity
critical
Lowest
Low
Medium
High
Critical

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here