| |||||||||||||||||||
Fedora alert FEDORA-2011-12369 (mantis)
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2011-12369 2011-09-09 04:55:44 -------------------------------------------------------------------------------- Name : mantis Product : Fedora 15 Version : 1.2.8 Release : 1.fc15 URL : http://www.mantisbt.org/ Summary : Web-based issue tracking system Description : Mantis is a free popular web-based issue tracking system. It is written in the PHP scripting language and works with MySQL, MS SQL, and PostgreSQL databases and a web server. Almost any web browser should be able to function as a client. Documentation can be found in: /usr/share/doc/mantis-1.2.8 When the package has finished installing, you will need to perform some additional configuration steps; these are described in: /usr/share/doc/mantis-1.2.8/README.Fedora -------------------------------------------------------------------------------- Update Information: Update to latest upstream release, fixes several security issues detailed in CVE-2011-2938 -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 7 2011 Gianluca Sforna <giallu@gmail.com> - 1.2.8-1 - New upstream release - Fixes several security issues CVE-2011-2938 (#731777) - Rebase Patch0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #731777 - CVE-2011-2938 MantisBT <1.2.7 search.php multiple XSS vulnerabilities https://bugzilla.redhat.com/show_bug.cgi?id=731777 [ 2 ] Bug #735514 - CVE-2011-3356 CVE-2011-3357 CVE-2011-3358 mantis: multiple flaws fixed in 1.2.8 https://bugzilla.redhat.com/show_bug.cgi?id=735514 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update mantis' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-... (Log in to post comments)
|
|||||||||||||||||||