[SECURITY] Fedora EPEL 4 Update: viewvc-1.0.9-1.el4

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2009-0255
2009-08-12 19:28:12
--------------------------------------------------------------------------------

Name        : viewvc
Product     : Fedora EPEL 4
Version     : 1.0.9
Release     : 1.el4
URL         : http://www.viewvc.org/
Summary     : Browser interface for CVS and SVN version control repositories
Description :
ViewVC is a browser interface for CVS and Subversion version control
repositories. It generates templatized HTML to present navigable directory,
revision, and change log listings. It can display specific versions of files
as well as diffs between those versions. Basically, ViewVC provides the bulk
of the report-like functionality you expect out of your version control tool,
but much more prettily than the average textual command-line program output.

--------------------------------------------------------------------------------
Update Information:

CHANGES in 1.0.9:    - security fix: validate the 'view' parameter to avoid XSS
attack  - security fix: avoid printing illegal parameter names and values
--------------------------------------------------------------------------------

This update can be installed with the "yum" update programs.  Use
su -c 'yum update viewvc' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora EPEL GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------