[SECURITY] Fedora 7 Update: mantis-1.1.0-1.fc7

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-0282
2008-01-07 00:45:10
--------------------------------------------------------------------------------

Name        : mantis
Product     : Fedora 7
Version     : 1.1.0
Release     : 1.fc7
URL         : http://www.mantisbt.org/
Summary     : Web-based bugtracking system
Description :
Mantis is a web-based bugtracking system.
It is written in the PHP scripting language and requires the MySQL
database and a webserver. Mantis has been installed on Windows, MacOS,
OS/2, and a variety of Unix operating systems. Any web browser should
be able to function as a client.

Documentation can be found in: /usr/share/doc/mantis-1.1.0

When the package has finished installing, you will need to perform some
additional configuration steps; these are described in:
/usr/share/doc/mantis-1.1.0/README.Fedora

--------------------------------------------------------------------------------
Update Information:

Please note this is a major mantis release, and a upgrade to the DB schema is needed.

Please refer to the package documentation to complete the upgrade.
--------------------------------------------------------------------------------
ChangeLog:

* Sat Jan  5 2008 Gianluca Sforna <giallu gmail com> - 1.1.0-1
- new upstream release
- rediffed patches
- allow local usage out of the box
- remove .htaccess files
- revert using embedded adodb 
  see http://www.mantisbt.org/bugs/view.php?id=8256 for details
- improve description and README.Fedora
- Remove unneeded diffutils BR
- Updated License field
* Tue Jul  3 2007 Gianluca Sforna <giallu gmail com> - 1.0.8-1
- new upstream release
- add Require: php-adodb (and remove embedded one)
- remove duplicate docs
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #427278 - CVE-2007-6611 Mantis 1.1.0 fixes a cross-site scripting flaw [Fedora 7]
        https://bugzilla.redhat.com/show_bug.cgi?id=427278
  [ 2 ] Bug #427277 - CVE-2007-6611 Mantis 1.1.0 fixes a cross-site scripting flaw
        https://bugzilla.redhat.com/show_bug.cgi?id=427277
--------------------------------------------------------------------------------
Updated packages:

ce45d334069c3bb251ce07951d52061f74db6495 mantis-config-httpd-1.1.0-1.fc7.noarch.rpm
d0a7684c55a7893859479e677b0327f6c28f993c mantis-1.1.0-1.fc7.noarch.rpm
d6494ebcafee111b06ff3577620f769d46bfaedb mantis-1.1.0-1.fc7.src.rpm

This update can be installed with the "yum" update program.  Use 
su -c 'yum update mantis' 
at the command line.  For more information, refer to "Managing Software
with yum", available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------