Package        : dojo
Version        : 1.10.2+dfsg-1+deb8u1
CVE ID         : CVE-2018-15494 
Debian Bug     : #906540

It was discovered that there was a string injection vulnerability in
the "dojo" Javascript library.

For Debian 8 "Jessie", this issue has been fixed in dojo version
1.10.2+dfsg-1+deb8u1 by Abhijith PA.

We recommend that you upgrade your dojo packages.


Regards,

- -- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

Debian LTS: DLA-1492-1: dojo security update

September 3, 2018
It was discovered that there was a string injection vulnerability in the "dojo" Javascript library

Summary

We recommend that you upgrade your dojo packages.


Regards,

- --
,''`.
: :' : Chris Lamb
`. `'` lamby@debian.org / chris-lamb.co.uk
`-



Severity
Package : dojo
Version : 1.10.2+dfsg-1+deb8u1
CVE ID : CVE-2018-15494
Debian Bug : #906540

Related News