Security Information / 2011 / Security Information -- DSA-2321-1 moin

Debian Security Advisory

DSA-2321-1 moin -- cross-site scripting

Date Reported:

10 Oct 2011

Affected Packages:

moin

Vulnerable:

Yes

Security database references:

In Mitre's CVE dictionary: CVE-2011-1058.

More information:

A cross-site scripting vulnerability was discovered in the reStructuredText parser of Moin, a Python clone of WikiWiki.

For the oldstable distribution (lenny), this problem has been fixed in version 1.7.1-3+lenny6.

For the stable distribution (squeeze), this problem has been fixed in version 1.9.3-1+squeeze1.

For the unstable distribution (sid), this problem has been fixed in version 1.9.3-3.

We recommend that you upgrade your moin packages.