Security fix.
Rakesh Khatumria <[email protected]> Fri, 8 Nov 2002 04:06:57 -0500 (EST)
| Newsgroups | gmane.comp.web.jigsaw |
|---|---|
| Message-ID | <7D5800A5B6E26644B2EB7A862856B0D403AA63FA@SARASWATI> |
This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.
------_=_NextPart_001_01C28705.C20A5B00
Content-Type: text/plain
Jigsaw 2.2.1 release notes specify that it also includes an important
security fix.
We are using Jigsaw 2.0.5, do we assume that it too still has the security
bugs inside ('URI parsing' and 'cross scripting attacks')?
Or can we check this?
Can you tell/refer us some implications and/or workarounds?
------_=_NextPart_001_01C28705.C20A5B00
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii">
<META NAME=3D"Generator" CONTENT=3D"MS Exchange Server version =
5.5.2653.12">
<TITLE>Security fix.</TITLE>
</HEAD>
<BODY>
<P><FONT COLOR=3D"#003366" SIZE=3D2 FACE=3D"Verdana">Jigs</FONT><FONT =
COLOR=3D"#003366" SIZE=3D2 FACE=3D"Verdana">aw 2.2.1 release notes =
specify that</FONT> <FONT COLOR=3D"#003366" SIZE=3D2 =
FACE=3D"Verdana">it also includes an</FONT> <FONT COLOR=3D"#003366" =
SIZE=3D2 FACE=3D"Verdana">important</FONT><FONT COLOR=3D"#003366" =
SIZE=3D2 FACE=3D"Verdana"></FONT> <FONT COLOR=3D"#003366" SIZE=3D2 =
FACE=3D"Verdana">security fix.</FONT>=20
<BR><FONT COLOR=3D"#003366" SIZE=3D2 FACE=3D"Verdana">W</FONT><FONT =
COLOR=3D"#003366" SIZE=3D2 FACE=3D"Verdana">e</FONT> <FONT =
COLOR=3D"#003366" SIZE=3D2 FACE=3D"Verdana">are using Jigsaw =
2.0.5,</FONT> <FONT COLOR=3D"#003366" SIZE=3D2 FACE=3D"Verdana">do we =
assume that it too</FONT> <FONT COLOR=3D"#003366" SIZE=3D2 =
FACE=3D"Verdana">still</FONT> <FONT COLOR=3D"#003366" SIZE=3D2 =
FACE=3D"Verdana">has the</FONT> <FONT COLOR=3D"#003366" SIZE=3D2 =
FACE=3D"Verdana">security bugs inside (</FONT><FONT COLOR=3D"#003366" =
SIZE=3D2 FACE=3D"Verdana">'</FONT><FONT COLOR=3D"#003366" SIZE=3D2 =
FACE=3D"Verdana">URI parsing</FONT><FONT COLOR=3D"#003366" SIZE=3D2 =
FACE=3D"Verdana">'</FONT><FONT COLOR=3D"#003366" SIZE=3D2 =
FACE=3D"Verdana"> and</FONT> <FONT COLOR=3D"#003366" SIZE=3D2 =
FACE=3D"Verdana">'</FONT><FONT COLOR=3D"#003366" SIZE=3D2 =
FACE=3D"Verdana">cross scripting attacks</FONT><FONT COLOR=3D"#003366" =
SIZE=3D2 FACE=3D"Verdana">'</FONT><FONT COLOR=3D"#003366" SIZE=3D2 =
FACE=3D"Verdana">)?</FONT></P>
<P><FONT COLOR=3D"#003366" SIZE=3D2 FACE=3D"Verdana">Or can we check =
this?</FONT>
<BR><FONT COLOR=3D"#003366" SIZE=3D2 FACE=3D"Verdana">C</FONT><FONT =
COLOR=3D"#003366" SIZE=3D2 FACE=3D"Verdana">an</FONT> <FONT =
COLOR=3D"#003366" SIZE=3D2 FACE=3D"Verdana">you tell</FONT><FONT =
COLOR=3D"#003366" SIZE=3D2 FACE=3D"Verdana">/</FONT><FONT =
COLOR=3D"#003366" SIZE=3D2 FACE=3D"Verdana">refer us some implications =
and/or workaro</FONT><FONT COLOR=3D"#003366" SIZE=3D2 =
FACE=3D"Verdana">unds?</FONT>
</P>
<BR>
</BODY>
</HTML>
------_=_NextPart_001_01C28705.C20A5B00--