Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 10 Update FEDORA-2009-8501 Critical: ViewVC XSS Prevention Fix

fedora
Calendar Grey August 12, 2009
Dist Fedora Esm H88
Security updates in ViewVC have enhanced parameter validation to mitigate XSS vulnerabilities and bolster system integrity within Fedora 10.
CHANGES in 1.0.9: - security fix: validate the 'view' parameter to avoid XSS attack - security fix: avoid printing illegal parameter names and values Also includes: Patch ...

Summary

ViewVC is a browser interface for CVS and Subversion version control

repositories. It generates templatized HTML to present navigable directory,

revision, and change log listings. It can display specific versions of files

as well as diffs between those versions. Basically, ViewVC provides the bulk

of the report-like functionality you expect out of your version control tool,

but much more prettily than the average textual command-line program output.

Update Information:

CHANGES in 1.0.9: - security fix: validate the 'view' parameter to avoid XSS attack - security fix: avoid printing illegal parameter names and values Also includes: Patch by Patrick Monnerat to make allow_tar work on F-10.

Topics%20covered

Topics Covered

security advisory update critical Fedora XSS patch viewvc

Change Log

* Wed Aug 12 2009 Bojan Smojver - 1.0.9-1 - bump up to 1.0.9 - security fix: validate the 'view' parameter to avoid XSS attack - security fix: avoid printing illegal parameter names and values * Tue Aug 11 2009 Bojan Smojver - 1.0.8-2 - fix allow_tar - patch by Patrick Monnerat * Thu May 7 2009 Bojan Smojver - 1.0.8-1 - Bump up to 1.0.8

References


[ 1 ] Bug #513006 - "allow_tar" option does not work https://bugzilla.redhat.com/show_bug.cgi?id=513006

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update viewvc' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: viewvc
Product: Fedora 10
Version: 1.0.9
Release: 1.fc10
URL: https://www.viewvc.org/
Summary: Browser interface for CVS and SVN version control repositories

Topics%20covered

Topics Covered

security advisory update critical Fedora XSS patch viewvc

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here