htdig: Unescaped output in htsearch and qtest causes security problems.

Debian Bug report logs - #305996
htdig: Unescaped output in htsearch and qtest causes security problems.

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Helge Kreutzmann <kreutzm@itp.uni-hannover.de>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: htdig: Unescaped output in htsearch and qtest causes security problems.

Date: Sat, 23 Apr 2005 15:34:17 +0200

Package: htdig
Version: N/A; reported 2005-04-23
Severity: important
Tags: security, woody, sarge

Please see the Fedora-alert:

http://lwn.net/Alerts/132723/


Unfortunately, the information given is quite scarce, so I don't know
if this is already fixed in previous (stable) uploads. Please close if
reported in error or change the tags if it only applies to testing.

-- System Information
Debian Release: 3.0
Architecture: i386
Kernel: Linux pleione 2.4.26-grsec #1 Tue Aug 10 15:42:40 CEST 2004 i686
Locale: LANG=en_US, LC_CTYPE=en_US

Message #16 received at 305996-done@bugs.debian.org (full text, mbox, reply):

From: Florian Weimer <fw@deneb.enyo.de>

To: 305996-done@bugs.debian.org

Subject: This is CVE-2005-0085

Date: Sun, 30 Oct 2005 23:23:43 +0100

According to <https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=144127>
(referenced from the LWN alert), this is CVE-2005-0085, which has
already been fixed in DSA-680-1 (and htdig 1:3.1.6-11 for sid).

Send a report that this bug log contains spam.