Stay Secure with the Latest Linux Advisories

security advisoryFedoracritical fix

Fedora 11: Mapserver 5.2.3 Critical: CVE-2009-0840 Security Issue

Changing imagepath and imageurl no longer allowed via URL, New fix for incomplete CVE-2009-0840 security fix made in 5.2.2, Fixed seg fault if font not found with label ANGLE FOLLOW (#2973). --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2009-9230 2009-09-03 00:09:58 --------------------------------------------------------------------------------Name : mapserver Product : Fedora 11 Version : 5.2.3 Release : 1.fc11 URL : Summary : Environment for building spatially-enabled internet applications Description : Mapserver is an internet mapping program that converts GIS data to map images in real time. With appropriate interface pages, Mapserver can provide an interactive internet map based on custom GIS data. --------------------------------------------------------------------------------Update Information: Changelog is: * Changing imagepath and imageurl no longer allowed via URL (#1836) * New fix for incomplete CVE-2009-0840 security fix made in 5.2.2 (#2943) * Fixed seg fault if font not found with label ANGLE FOLLOW (#2973) --------------------------------------------------------------------------------ChangeLog: * Mon Aug 31 2009 Devrim GUNDUZ - 5.2.3-1 - Update to 5.2.3 which CVE-2009-0840(again) and other issues. * Sun Apr 5 2009 Devrim GUNDUZ - 5.2.2-1 - Update to 5.2.2 which fixes : CVE-2009-0839, CVE-2009-0840, CVE-2009-0841, CVE-2009-0842, CVE-2009-0843, CVE-2009-1176, CVE-2009-1177. * Wed Feb 25 2009 Fedora Release Engineering - 5.2.1-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild --------------------------------------------------------------------------------This update can be installed with the "yum" update program. Use su -c 'yum update mapserver' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More detailson the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ Fedora-package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Addresses various problems, incorporating the CVE-2009-0840 security patch for the updated MapServer software in Fedora 11.. Fedora 11,Mapserver Update,Critical Fix,Security Repair. . Severity: Critical. LinuxSecurity.com Team

Sep 02, 2009 •Critical Fedora