[Pkg-javascript-devel] Bug#787100: Bug#787100: libjs-jquery-ui: Security patch CVE-2010-5312 breaks ui dialog

[Sébastien Delafond]

Thanks for the report. It will be fixed this week.

Cheers,

--Seb

On May/28, Antonino Murador wrote:
> Package: libjs-jquery-ui 
> Version: 1.8.ooops.21+dfsg-2+deb7u1 
> Severity: grave 
> Tags: patch 
> 
> Dear Maintainer, 
> 
> After upgrading from version 1.8.ooops.21+dfsg-2 to 1.8.ooops.21+dfsg-2+deb7u1 
> on a Wheezy machine, our software depending on it stopped working. 
> Upon inspection, it looks like the file /usr/share/javascript/jquery- 
> ui/ui/jquery.ui.dialog.js is missing the definition of the _title function. 
> 
> The attached patch should address the problem. Please consider to release a new 
> version to fix the issue. 
> 
> System information not provided as the report was sent from a different machine. 
> 
> 
> -- No system Information: 
> 
> -- no debconf information 

> diff --git a/jquery.ui.dialog.js b/jquery.ui.dialog.js
> index a914007..0d9967c 100644
> --- a/jquery.ui.dialog.js
> +++ b/jquery.ui.dialog.js
> @@ -206,6 +206,13 @@ $.widget("ui.dialog", {
>  		}
>  	},
>  
> +        _title: function( title ) {
> +                if ( !this.options.title ) {
> +                        title.html( " " );
> +                }
> +                title.text( this.options.title );
> +        },
> +
>  	_init: function() {
>  		if ( this.options.autoOpen ) {
>  			this.open();

> _______________________________________________
> Pkg-javascript-devel mailing list
> Pkg-javascript-devel at lists.alioth.debian.org
> http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-javascript-devel