[Pkg-javascript-devel] Bug#787100: libjs-jquery-ui: Security patch CVE-2010-5312 breaks ui dialog

Antonino Murador muradora at vdagroup.com
Thu May 28 15:58:52 UTC 2015


Package: libjs-jquery-ui 
Version: 1.8.ooops.21+dfsg-2+deb7u1 
Severity: grave 
Tags: patch 

Dear Maintainer, 

After upgrading from version 1.8.ooops.21+dfsg-2 to 1.8.ooops.21+dfsg-2+deb7u1 
on a Wheezy machine, our software depending on it stopped working. 
Upon inspection, it looks like the file /usr/share/javascript/jquery- 
ui/ui/jquery.ui.dialog.js is missing the definition of the _title function. 

The attached patch should address the problem. Please consider to release a new 
version to fix the issue. 

System information not provided as the report was sent from a different machine. 


-- No system Information: 

-- no debconf information 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-javascript-devel/attachments/20150528/56d9942c/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: CVE-2010-5312_dialog-fix.patch
Type: text/x-patch
Size: 483 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-javascript-devel/attachments/20150528/56d9942c/attachment.bin>


More information about the Pkg-javascript-devel mailing list