[pkg-horde] Latest Horde security problems

[Lionel Elie Mamane]

On Mon, Mar 26, 2007 at 05:04:56PM +0200, Moritz Muehlenhoff wrote:

> please note that this issue from upstream changelog is still unfixed
> in Etch:
> - Fixed an XSS vulnerability in the language selection.

> Also, please work on a Sarge update.

I still had this on my TODO list, but I'm now stepping down from
active role in Horde maintenance in Debian, and as my failure to
address this in months shows, should have much earlier. Another's
person problem now, sorry.

> The security team doesn't have the means to test such a web
> application framework.

OTOH, I never had the means to test an XSS vulnerability.

-- 
Lionel