DSA-2009-1 tdiary -- insufficient input sanitising| ID: oval:org.secpod.oval:def:600061 | Date: (C)2011-01-28 (M)2022-10-10 |
| Class: PATCH | Family: unix |
It was discovered that tdiary, a communication-friendly weblog system, is prone to a cross-site scripting vulnerability due to insuficient input sanitising in the TrackBack transmission plugin. For the stable distribution , this problem has been fixed in version 2.2.1-1+lenny1. For the testing distribution , this problem will be fixed soon. For the unstable distribution , this problem has been fixed in version 2.2.1-1.1. We recommend that you upgrade your tdiary packages.
