mantis - cross site scripting

Several remote vulnerabilities have been discovered in the Mantis bug
tracking system, which may lead to the execution of arbitrary web script.
The Common Vulnerabilities and Exposures project identifies the following
problems:

• CVE-2006-0664
  A cross-site scripting vulnerability was discovered in
  config_defaults_inc.php.
• CVE-2006-0665
  Cross-site scripting vulnerabilities were discovered in query_store.php
  and manage_proj_create.php.
• CVE-2006-0841
  Multiple cross-site scripting vulnerabilities were discovered in
  view_all_set.php, manage_user_page.php, view_filters_page.php and
  proj_doc_delete.php.
• CVE-2006-1577
  Multiple cross-site scripting vulnerabilities were discovered in
  view_all_set.php.

For the stable distribution (sarge) these problems have been fixed in
version 0.19.2-5sarge4.1.

For the unstable distribution (sid) these problems have been fixed in
version 0.19.4-3.1.

We recommend that you upgrade your mantis package.