It was discovered that firefox-sage, a lightweight RSS and Atom feed reader for Firefox, does not sanitise the RSS feed information correctly, which makes it prone to a cross-site scripting and a cross-domain scripting attack. For the oldstable distribution (etch), this problem has been fixed in version 1.3.6-4etch1. For the stable distribution (lenny), this problem has been fixed in version 1.4.2-0.1+lenny1. For the testing distribution (squeeze) and the unstable distribution (sid), this problem has been fixed in version 1.4.3-3. We recommend that you upgrade your firefox-sage packages.
It was discovered that firefox-sage, a lightweight RSS and Atom feed reader for Firefox, does not sanitise the RSS feed information correctly, which makes it prone to a cross-site scripting and a cross-domain scripting attack.
For the oldstable distribution (etch), this problem has been fixed in version 1.3.6-4etch4.
For the stable distribution (lenny), this problem has been fixed in version 1.4.2-0.1+lenny1.
For the testing distribution (squeeze) and the unstable distribution (sid), this problem has been fixed in version 1.4.3-3.
We recommend that you upgrade your firefox-sage packages.
MD5 checksums of the listed files are available in the original advisory.