130623 2006-04-20 10:21 0000 www-apps/gallery-1.5.2_p2 vulnerability 2006-04-28 11:19:52 0000 1 1 1 Unclassified Gentoo Security Vulnerabilities unspecified All Linux RESOLVED FIXED http://gallery.menalto.com/gallery_1.5.3_released B4 [noglsa] jaervosz P2 minor --- 1 rl03@gentoo.org security@gentoo.org web-apps@gentoo.org rl03@gentoo.org 2006-04-20 10:21:30 0000 From the website: Gallery 1.5.3 is now available for download. This release is primarily a bug fix release, but it also includes an important security fix. The fixes: Security: Not all user input was correctly sanitized for JavaScript injection. (Thanks to Aditya Mooley at adityamooley@sanisoft.com for reporting this and giving us plenty of time to fix it!) rl03@gentoo.org 2006-04-20 10:22:14 0000 1.5.3 in CVS, needs stabling jaervosz@gentoo.org 2006-04-20 10:41:47 0000 Thx Renat. Arches please test and mark stable. dertobi123@gentoo.org 2006-04-20 12:03:30 0000 ppc stable wolf31o2@gentoo.org 2006-04-20 12:26:50 0000 x86 is done... killerfox@gentoo.org 2006-04-21 14:32:16 0000 stable on hppa koon@gentoo.org 2006-04-22 03:01:39 0000 If the latest stable are OK (2.0 line) then maybe no need for a GLSA over this jaervosz@gentoo.org 2006-04-22 03:06:51 0000 I don't think a GLSA is needed for this. Though we still have a few arches that has to mark stable. dang@gentoo.org 2006-04-23 12:15:02 0000 amd64 done yoswink@gentoo.org 2006-04-23 16:50:41 0000 alpha stable. gustavoz@gentoo.org 2006-04-24 06:54:47 0000 sparc stable. koon@gentoo.org 2006-04-28 11:19:52 0000 stable everywhere. As latest stable is not affected, closing without GLSA Feel free to reopen if you disagree.