Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0 allows remote attackers to inject arbitrary web script or HTML via vectors involving nested CDATA stanzas.

Various issues in python-feedparser have been fixed, including fixes for crashes due to missing input sanitizaion and a XSS vulnerability.
CVE-2011-1156, CVE-2011-1157, CVE-2011-1158 and CVE-2009-5065 have been assigned to these issues.

Previous version of python-djblets contained embedded / own copy of python-feedparser (BUILD/Djblets-0.6.22/djblets/feedview feedparser.py) code, which is vulnerable to numerous security flaws (CVE-2009-5065, CVE-2011-1156, CVE-2011-1157, and CVE-2011-1158 to mention some of them).

This package modifies Djblets to use the system copy of feedparser.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Multiple vulnerabilities has been found and corrected in python-feedparser :

Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0 allows remote attackers to inject arbitrary web script or HTML via vectors involving nested CDATA stanzas (CVE-2009-5065).

feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0.1 allows remote attackers to cause a denial of service (application crash) via a malformed DOCTYPE declaration (CVE-2011-1156).

Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via malformed XML comments (CVE-2011-1157).

Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via an unexpected URI scheme, as demonstrated by a javascript: URI (CVE-2011-1158).

The updated packages have been patched to correct these issues.

Current release: 5.0.1 - February 20, 2011

  - Fix issue 91 (invalid text in XML declaration causes     sanitizer to crash)

    - Fix issue 254 (sanitization can be bypassed by       malformed XML comments)

    - Fix issue 255 (sanitizer doesn't strip unsafe URI       schemes)

Previous release: 5.0 - January 25, 2011

  - Improved MathML support

    - Support microformats (rel-tag, rel-enclosure, xfn,       hcard)

    - Support IRIs

    - Allow safe CSS through sanitization

    - Allow safe HTML5 through sanitization

    - Support SVG

    - Support inline XML entity declarations

    - Support unescaped quotes and angle brackets in       attributes

    - Support additional date formats

    - Added the request_headers argument to parse()

    - Added the response_headers argument to parse()

    - Support multiple entry, feed, and source authors

    - Officially make Python 2.4 the earliest supported       version

    - Support Python 3

    - Bug fixes, bug fixes, bug fixes

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
76003	openSUSE Security Update : python-feedparser (openSUSE-SU-2011:0314-1)	Nessus	SuSE Local Security Checks	medium
75719	openSUSE Security Update : python-feedparser (openSUSE-SU-2011:0314-1)	Nessus	SuSE Local Security Checks	medium
61583	Fedora 17 : python-djblets-0.7.1-3.fc17 (2012-11668)	Nessus	Fedora Local Security Checks	medium
61581	Fedora 16 : python-djblets-0.6.22-2.fc16 (2012-11576)	Nessus	Fedora Local Security Checks	medium
53794	openSUSE Security Update : python-feedparser (openSUSE-SU-2011:0314-1)	Nessus	SuSE Local Security Checks	medium
53629	Mandriva Linux Security Advisory : python-feedparser (MDVSA-2011:082)	Nessus	Mandriva Local Security Checks	medium
53551	Fedora 13 : python-feedparser-5.0.1-1.fc13 (2011-4911)	Nessus	Fedora Local Security Checks	medium
53550	Fedora 14 : python-feedparser-5.0.1-1.fc14 (2011-4894)	Nessus	Fedora Local Security Checks	medium
53457	Fedora 15 : python-feedparser-5.0.1-1.fc15 (2011-4988)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2009-5065

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium