Debian Security Advisory
DSA-2461-1 spip -- several vulnerabilities
- Date Reported:
- 26 Apr 2012
- Affected Packages:
- Security database references:
- In Mitre's CVE dictionary: CVE-2012-2151.
- More information:
Several vulnerabilities have been found in SPIP, a website engine for publishing, resulting in cross-site scripting, script code injection and bypass of restrictions.
For the stable distribution (squeeze), this problem has been fixed in version 2.1.1-3squeeze3.
For the testing distribution (wheezy), this problem has been fixed in version 2.1.13-1.
For the unstable distribution (sid), this problem has been fixed in version 2.1.13-1.
We recommend that you upgrade your spip packages.