FYI: due to the difficulty in making the security issues logged in gemini public (the title or/and details would be very useful to potential hackers), I've decided that when we have a security related issue that ends up requiring a change in code, I will keep the original gemini issue private, but create a new issue that is public. This will have the title used in the security advisory and a link to the relevant page for further details. This should allow people to see all the issues worked on for a release, but still ensure that no sensitive information gets leaked.

Thanks,

Cathal

Anyone know what is happening with XSS resolution found by Soroush Dalili?

Thanks

Marc.

Hi, Sorry I should have given a link: http://www.securityfocus.com/archive/1/492793 

Has anyone looked at how much of an issue this actually is and does anybody know if anything is being done about it?

Thanks