-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2010-15080 2010-09-22 00:14:48 --------------------------------------------------------------------------------
Name : mantis Product : Fedora 12 Version : 1.1.8 Release : 4.fc12 URL : http://www.mantisbt.org/ Summary : Web-based issue tracking system Description : Mantis is a web-based bugtracking system. It is written in the PHP scripting language and requires the MySQL database and a webserver. Mantis has been installed on Windows, MacOS, OS/2, and a variety of Unix operating systems. Any web browser should be able to function as a client. Documentation can be found in: /usr/share/doc/mantis-1.1.8 When the package has finished installing, you will need to perform some additional configuration steps; these are described in: /usr/share/doc/mantis-1.1.8/README.Fedora -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 20 2010 Gianluca Sforna <[email protected]> - 1.1.8-4 - Fix CVE-2010-3070 using system's NuSOAP (#633011) - Fix CVE-2010-2574 and CVE-2010-3303 (#633003 #634340) * Sun Jan 17 2010 Gianluca Sforna <giallu gmail com> - 1.1.8-3 - Tweak summary - Don't restart apache (#552943) -------------------------------------------------------------------------------- References: [ 1 ] Bug #633011 - Mantis: Vulnerable to CVE-2010-3070 (XSS in php-nusoap) due use of embedded copy of nusoap library https://bugzilla.redhat.com/show_bug.cgi?id=633011 [ 2 ] Bug #634340 - CVE-2010-3303 mantis: several XSS flaws fixed in 1.2.3 https://bugzilla.redhat.com/show_bug.cgi?id=634340 [ 3 ] Bug #633003 - CVE-2010-2574 Mantis: XSS in Add Category action. https://bugzilla.redhat.com/show_bug.cgi?id=633003 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update mantis' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list [email protected] https://admin.fedoraproject.org/mailman/listinfo/package-announce
