LWN.net Logo

Fedora alert FEDORA-2010-4326 (viewvc)

From:  updates@fedoraproject.org
To:  package-announce@lists.fedoraproject.org
Subject:  [SECURITY] Fedora 11 Update: viewvc-1.1.4-1.fc11
Date:  Tue, 16 Mar 2010 00:37:37 +0000
Message-ID:  <20100316003737.8A5591101F1@bastion02.phx2.fedoraproject.org>
Archive-link:  Article, Thread

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2010-4326 2010-03-12 03:08:57 -------------------------------------------------------------------------------- Name : viewvc Product : Fedora 11 Version : 1.1.4 Release : 1.fc11 URL : http://www.viewvc.org/ Summary : Browser interface for CVS and SVN version control repositories Description : ViewVC is a browser interface for CVS and Subversion version control repositories. It generates templatized HTML to present navigable directory, revision, and change log listings. It can display specific versions of files as well as diffs between those versions. Basically, ViewVC provides the bulk of the report-like functionality you expect out of your version control tool, but much more prettily than the average textual command-line program output. -------------------------------------------------------------------------------- Update Information: Update to upstream version 1.1.4, fixing one XSS flaw and several bugs: * http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANG... * security fix: escape user-provided query form input to avoid XSS attack * fix standalone.py failure (when per-root options aren't used) (issue #445) * fix annotate failure caused by ignored svn_config_dir (issue #447) -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 11 2010 Bojan Smojver <bojan@rexursive.com> - 1.1.4-1 - bump up to 1.1.4 * Fri Jan 8 2010 Bojan Smojver <bojan@rexursive.com> - 1.1.3-2 - patch upstream issue #445 * Wed Dec 23 2009 Bojan Smojver <bojan@rexursive.com> - 1.1.3-1 - bump up to 1.1.3 - drop patch for upstream issue #427 * Wed Sep 23 2009 Bojan Smojver <bojan@rexursive.com> - 1.1.2-5 - patch upstream issue #427 * Thu Aug 13 2009 Bojan Smojver <bojan@rexursive.com> - 1.1.2-4 - try one more time * Thu Aug 13 2009 Bojan Smojver <bojan@rexursive.com> - 1.1.2-3 - better mimetypes.conf generation script * Wed Aug 12 2009 Bojan Smojver <bojan@rexursive.com> - 1.1.2-2 - fix replacement of various config variables * Wed Aug 12 2009 Bojan Smojver <bojan@rexursive.com> - 1.1.2-1 - bump up to 1.1.2 - security fix: validate the 'view' parameter to avoid XSS attack - security fix: avoid printing illegal parameter names and values * Tue Aug 11 2009 Bojan Smojver <bojan@rexursive.com> - 1.1.1-2 - install mimetypes.conf - populate mimetypes.conf with what pygments understands * Thu Jun 4 2009 Bojan Smojver <bojan@rexursive.com> - 1.1.1-1 - Bump up to 1.1.1 * Thu May 14 2009 Bojan Smojver <bojan@rexursive.com> - 1.1.0-1 - Final 1.1.0 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update viewvc' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-...


(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds