Scientific Linux: CVE-2010-3906 Moderate: Git Cross-Site Scripting Threat

Date: Thu, 3 Mar 2011 16:33:02 -0600
Reply-To: Troy Dawson 
Sender: Security Errata for Scientific Linux
 
From: Troy Dawson 
Subject: Security ERRATA Moderate: git on SL6.x i386/x86_64
Comments: To: "This email address is being protected from spambots. You need JavaScript enabled to view it."
 

Synopsis:	Moderate: git security update
Issue date:	2010-12-21
CVE Names:	CVE-2010-3906

A cross-site scripting (XSS) flaw was found in gitweb, a simple web
interface for Git repositories. A remote attacker could perform an XSS
attack against victims by tricking them into visiting a
specially-crafted gitweb URL. (CVE-2010-3906)

SL 6.x

 SRPMS:
git-1.7.1-2.el6_0.1.src.rpm
 i386:
emacs-git-1.7.1-2.el6_0.1.noarch.rpm
emacs-git-el-1.7.1-2.el6_0.1.noarch.rpm
git-1.7.1-2.el6_0.1.i686.rpm
git-all-1.7.1-2.el6_0.1.noarch.rpm
git-cvs-1.7.1-2.el6_0.1.noarch.rpm
git-daemon-1.7.1-2.el6_0.1.i686.rpm
git-email-1.7.1-2.el6_0.1.noarch.rpm
git-gui-1.7.1-2.el6_0.1.noarch.rpm
gitk-1.7.1-2.el6_0.1.noarch.rpm
git-svn-1.7.1-2.el6_0.1.noarch.rpm
gitweb-1.7.1-2.el6_0.1.noarch.rpm
perl-Git-1.7.1-2.el6_0.1.noarch.rpm
 x86_64:
emacs-git-1.7.1-2.el6_0.1.noarch.rpm
emacs-git-el-1.7.1-2.el6_0.1.noarch.rpm
git-1.7.1-2.el6_0.1.x86_64.rpm
git-all-1.7.1-2.el6_0.1.noarch.rpm
git-cvs-1.7.1-2.el6_0.1.noarch.rpm
git-daemon-1.7.1-2.el6_0.1.x86_64.rpm
git-email-1.7.1-2.el6_0.1.noarch.rpm
git-gui-1.7.1-2.el6_0.1.noarch.rpm
gitk-1.7.1-2.el6_0.1.noarch.rpm
git-svn-1.7.1-2.el6_0.1.noarch.rpm
gitweb-1.7.1-2.el6_0.1.noarch.rpm
perl-Git-1.7.1-2.el6_0.1.noarch.rpm

-Connie Sieh
-Troy Dawson