fckeditor: CVE-2014-4037

Related Vulnerabilities: CVE-2014-4037  

Debian Bug report logs - #752873
fckeditor: CVE-2014-4037

version graph

Package: fckeditor; Maintainer for fckeditor is (unknown);

Reported by: Moritz Muehlenhoff <jmm@inutil.org>

Date: Fri, 27 Jun 2014 10:03:02 UTC

Severity: grave

Tags: security

Fixed in version 1:2.6.6-3+rm

Done: Debian FTP Masters <ftpmaster@ftp-master.debian.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, team@security.debian.org, secure-testing-team@lists.alioth.debian.org, Frank Habermann <lordlamer@lordlamer.de>:
Bug#752873; Package fckeditor. (Fri, 27 Jun 2014 10:03:06 GMT) (full text, mbox, link).


Acknowledgement sent to Moritz Muehlenhoff <jmm@inutil.org>:
New Bug report received and forwarded. Copy sent to team@security.debian.org, secure-testing-team@lists.alioth.debian.org, Frank Habermann <lordlamer@lordlamer.de>. (Fri, 27 Jun 2014 10:03:06 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Moritz Muehlenhoff <jmm@inutil.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: fckeditor: CVE-2014-4037
Date: Fri, 27 Jun 2014 11:45:03 +0200
Package: fckeditor
Severity: grave
Tags: security
Justification: user security hole

Hi,
please see 
http://packetstormsecurity.com/files/126902/FCKeditor-2.6.10-Cross-Site-Scripting.html
http://ckeditor.com/blog/FCKeditor-2.6.11-Released

Cheers,
        Moritz



Reply sent to Debian FTP Masters <ftpmaster@ftp-master.debian.org>:
You have taken responsibility. (Sun, 16 Aug 2015 21:39:53 GMT) (full text, mbox, link).


Notification sent to Moritz Muehlenhoff <jmm@inutil.org>:
Bug acknowledged by developer. (Sun, 16 Aug 2015 21:39:53 GMT) (full text, mbox, link).


Message #10 received at 752873-done@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
To: 735941-done@bugs.debian.org,752873-done@bugs.debian.org,758897-done@bugs.debian.org,
Cc: fckeditor@packages.debian.org, fckeditor@packages.qa.debian.org
Subject: Bug#795398: Removed package(s) from unstable
Date: Sun, 16 Aug 2015 21:39:20 +0000
Version: 1:2.6.6-3+rm

Dear submitter,

as the package fckeditor has just been removed from the Debian archive
unstable we hereby close the associated bug reports.  We are sorry
that we couldn't deal with your issue properly.

For details on the removal, please see https://bugs.debian.org/795398

The version of this package that was in Debian prior to this removal
can still be found using http://snapshot.debian.org/.

This message was generated automatically; if you believe that there is
a problem with it please contact the archive administrators by mailing
ftpmaster@ftp-master.debian.org.

Debian distribution maintenance software
pp.
Scott Kitterman (the ftpmaster behind the curtain)



Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Mon, 14 Sep 2015 07:37:11 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed Jun 19 15:57:17 2019; Machine Name: beach

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.