This bug was fixed in the package loggerhead - 1.17+bzr400-1ubuntu0.1
--------------- loggerhead (1.17+bzr400-1ubuntu0.1) lucid-security; urgency=low
* SECURITY UPDATE: Cross-site scripting vulnerabilities by crafted branch contents. (LP: #740142) - debian/patches/bug-740142.diff: improve escaping of filenames. - CVE-2011-0728 -- William Grant <email address hidden> Thu, 24 Mar 2011 13:39:43 +1100
This bug was fixed in the package loggerhead - 1.17+bzr400- 1ubuntu0. 1
--------------- 1ubuntu0. 1) lucid-security; urgency=low
loggerhead (1.17+bzr400-
* SECURITY UPDATE: Cross-site scripting vulnerabilities by crafted branch
contents. (LP: #740142)
- debian/patches/bug-740142.diff: improve escaping of filenames.
- CVE-2011-0728
-- William Grant <email address hidden> Thu, 24 Mar 2011 13:39:43 +1100