Cross-site scripting vulnerability in omega CGI exception reporting

Vulnerable versions: xapian-omega 1.0.15 and all earlier releases; xapian-omega 1.1.0-1.1.2

Fixed in xapian-omega 1.0.16, and will be fixed in xapian-omega 1.1.3.

•  xapian-discuss announcement with patch.

•  CVE-2009-2947

•  Debian DSA-1882-1

•  FreeBSD