Re: POST FBR : Bodhi XSS vulnerability

[Leigh Griffin <lgriffin@xxxxxxxxxx>]

Great job addressing this Clément

On Mon, Mar 2, 2020 at 5:26 PM Clement Verna <cverna@xxxxxxxxxxxxxxxxx> wrote:

Hi all,

An XSS vulnerability was reported against Bodhi, I have patched the staging and production instances [0][1] until I get the fix upstream and deploy a new release.

[0] - https://infrastructure.fedoraproject.org/cgit/ansible.git/commit/?id=9b1336960b307a2a81d6232f0ce40f40dfb0f83a

[1] - https://infrastructure.fedoraproject.org/cgit/ansible.git/commit/?id=1a901aba52a780328f48f7c271f6f84a5333b4f8

Thanks

_______________________________________________
infrastructure mailing list -- infrastructure@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to infrastructure-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/infrastructure@xxxxxxxxxxxxxxxxxxxxxxx

--

Leigh Griffin

Engineering Manager

Red Hat Waterford

Communications House

Cork Road, Waterford City

lgriffin@xxxxxxxxxx    
M: +353877545162     IM: lgriffin

@redhatjobs   redhatjobs @redhatjobs  

_______________________________________________
infrastructure mailing list -- infrastructure@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to infrastructure-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/infrastructure@xxxxxxxxxxxxxxxxxxxxxxx