Bug 243826

Summary:	<web-apps/wordpress-2.6.3 vulnerability in bundled Snoopy library
Product:	Gentoo Linux	Reporter:	Tobias Scherbaum (RETIRED) <dertobi123>
Component:	New packages	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	CC:	web-apps
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://wordpress.org/development/2008/10/wordpress-263/
Whiteboard:
Package list:		Runtime testing required:	---

Description Tobias Scherbaum (RETIRED) gentoo-dev

2008-10-24 15:20:32 UTC

"A vulnerability in the Snoopy library was announced today.  WordPress uses Snoopy to fetch the feeds shown in the Dashboard.   Although this seems to be a low risk vulnerability for WordPress users, we wanted to get an update out immediately.  2.6.3 is available for download right now.  If you don’t want to download the whole release to get the security fix, you can download the following two files and copy them over your 2.6.2 installation."

Comment 1 Gunnar Wrobel (RETIRED) gentoo-dev

2008-10-30 15:06:24 UTC

Bumped to 2.6.3 without testing. Hard masked anyhow.