[ GLSA 201311-22 ] Namazu: Multiple vulnerabilities

[GLSA]

Gentoo Linux Security Advisory

Title: Namazu: Multiple vulnerabilities (GLSA 201311-22)
Severity: normal
Exploitable: remote
Date: November 28, 2013
Bug(s): #391259
ID: 201311-22

Synopsis

Multiple vulnerabilities have been found in Namazu, worst of which
allows remote attackers to cause a Denial of Service condition.


Background

Namazu is a full-text search engine intended for easy use.

Affected Packages

Package: app-text/namazu
Vulnerable: < 2.0.21
Unaffected: >= 2.0.21
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in Namazu. Please review
the CVE identifiers referenced below for details.


Impact

A remote attacker could execute arbitrary code or cause a Denial of
Service condition.
Furthermore, a remote attacker may be able to inject arbitrary web script
or HTML via a cookie.


Workaround

There is no known workaround at this time.

Resolution

All Namazu users should upgrade to the latest version: