Fedora alert FEDORA-2009-3474 (wordpress-mu)

From:
    	     
 
updates@fedoraproject.org 
To:
    	     
 
fedora-package-announce@redhat.com 
Subject:
    	     
 
[SECURITY] Fedora 10 Update: wordpress-mu-2.6.5-2.fc10 
Date:
    	     
 
Thu, 09 Apr 2009 16:15:18 +0000
Message-ID:
    	     
 
<20090409161431.87C0110F871@bastion2.fedora.phx.redhat.com>
Archive-link:
    	     
 
Article, Thread
              
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-3474
2009-04-09 15:25:44
--------------------------------------------------------------------------------

Name        : wordpress-mu
Product     : Fedora 10
Version     : 2.6.5
Release     : 2.fc10
URL         : http://mu.wordpress.org/latest.tar.gz
Summary     : WordPress-MU multi-user blogging software
Description :
WordPress-MU is a derivative of the WordPress blogging codebase, to allow
one instance to serve multiple users.

--------------------------------------------------------------------------------
ChangeLog:

* Tue Apr  7 2009 Bret McMillan <bretm@redhat.com> - 2.6.5-2
- Patch for CVE-2009-1030
* Mon Dec  1 2008 Bret McMillan <bretm@redhat.com> - 2.6.5-1
- Update to 2.6.5
- http://wordpress.org/development/2008/11/wordpress-265/
- http://ocaoimh.ie/2008/11/25/wordpress-mu-265/
- Fixes 1 XSS security issue, 3 bugs
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #491318 - CVE-2009-1030 wordpress-mu: XSS vulnerability in helper function for WPMU
        https://bugzilla.redhat.com/show_bug.cgi?id=491318
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update wordpress-mu' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------

_______________________________________________
Fedora-package-announce mailing list
Fedora-package-announce@redhat.com
http://www.redhat.com/mailman/listinfo/fedora-package-ann...