[prev in list] [next in list] [prev in thread] [next in thread] 

List:       bugtraq
Subject:    Re: [RHSA-2001:162-04] Updated namazu packages are available
From:       knok () daionet ! gr ! jp (NOKUBI Takatsugu)
Date:       2001-12-27 15:45:57
[Download RAW message or body]

In article <200112250305.fBP35Wr26855@porkchop.redhat.com>
bugzilla@redhat.com writes:

>> 3. Problem description:
>> 
>> namazu may inadvertently include malicious HTML tags or script in a
>> dynamically generated page based on unvalidated input from untrustworthy
>> sources.

The issue is still exist on Namazu 2.0.9... Namazu Project was
released 2.0.10, I recomment to use it.
-- 
NOKUBI Takatsugu
E-mail: knok@daionet.gr.jp
	knok@namazu.org / knok@debian.org
[prev in list] [next in list] [prev in thread] [next in thread]