Ubuntu
empathy package

  1. Bug #879301
  2. Comment #3

Comment 3 for bug 879301

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package empathy - 3.2.0.1-0ubuntu1.1

---------------
empathy (3.2.0.1-0ubuntu1.1) oneiric-security; urgency=low

  * SECURITY UPDATE: remote HTML injection (LP: #879301)
    - debian/patches/50_empathy-CVE-2011-3635-lp879301.patch: escape
      HTML in when displaying other users' names. (Thanks to upstream
      for patch.)
    - CVE-2011-3635, CVE-2011-4170
 -- Steve Beattie <email address hidden> Mon, 24 Oct 2011 14:56:42 -0700