Ubuntu
zend-framework package

  1. Bug #345682
  2. Comment #2

Comment 2 for bug 345682

Revision history for this message
Micah Gersten (micahg) wrote : Re: [Bug 345682] Re: XSS attack vector in Zend_Filter_StripTags

Kees Cook wrote:
> Thanks for taking the time to report this bug and helping to make Ubuntu
> better. Since the package referred to in this bug is in universe or
> multiverse, it is community maintained. If you are able, I suggest
> posting a debdiff for this issue. When a debdiff is available, members
> of the security team will review it and publish the package. See the
> following link for more information:
> https://wiki.ubuntu.com/SecurityUpdateProcedures
>
> ** Changed in: zend-framework (Ubuntu)
> Status: New => Confirmed
>
>
 Am I allowed to just patch this one bug or can I upgrade the package to
the lastest version as well?

Thanks,
Micah