<div dir="ltr">Andre just went to vacation, but to the best of my knowledge he worked with the reporter and has released a new version to address this issue.<br><br>Rainer<br></div><div class="gmail_extra"><br><br><div class="gmail_quote">
On Wed, Sep 3, 2014 at 1:11 PM, Daniel Pocock <span dir="ltr"><<a href="mailto:daniel@pocock.pro" target="_blank">daniel@pocock.pro</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<br>
<br>
Hi Rainer, Andre,<br>
<br>
Could you please comment on this security report?<br>
<br>
Is the current Debian package affected?<br>
<br>
Regards,<br>
<br>
Daniel<br>
<br>
<br>
On 03/09/14 13:04, Salvatore Bonaccorso wrote:<br>
> Source: loganalyzer<br>
> Version: 3.6.5+dfsg-7<br>
> Severity: important<br>
> Tags: security upstream fixed-upstream<br>
><br>
> Hi,<br>
><br>
> the following vulnerability was published for loganalyzer. But I was<br>
> not yet able to verify the vulnerability, but it is said to be fixed<br>
> in 3.6.6 upstream.<br>
><br>
> CVE-2014-6070[0]:<br>
> Syslog LogAnalyzer persistent XSS injection<br>
><br>
> If you fix the vulnerability please also make sure to include the<br>
> CVE (Common Vulnerabilities & Exposures) id in your changelog entry.<br>
><br>
> For further information see:<br>
><br>
> [0] <a href="https://security-tracker.debian.org/tracker/CVE-2014-6070" target="_blank">https://security-tracker.debian.org/tracker/CVE-2014-6070</a><br>
> [1] <a href="http://seclists.org/fulldisclosure/2014/Sep/17" target="_blank">http://seclists.org/fulldisclosure/2014/Sep/17</a><br>
> [2] <a href="http://loganalyzer.adiscon.com/downloads/" target="_blank">http://loganalyzer.adiscon.com/downloads/</a><br>
><br>
> Regards,<br>
> Salvatore<br>
><br>
> _______________________________________________<br>
> Pkg-monitoring-maintainers mailing list<br>
> <a href="mailto:Pkg-monitoring-maintainers@lists.alioth.debian.org">Pkg-monitoring-maintainers@lists.alioth.debian.org</a><br>
> <a href="http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-monitoring-maintainers" target="_blank">http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-monitoring-maintainers</a><br>
<br>
</blockquote></div><br></div>