[SECURITY] Fedora 10 Update: moin-1.6.4-1.fc10

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-3868
2009-04-21 23:56:14
--------------------------------------------------------------------------------

Name        : moin
Product     : Fedora 10
Version     : 1.6.4
Release     : 1.fc10
URL         : http://moinmo.in/
Summary     : MoinMoin is a WikiEngine to collaborate on easily editable web pages
Description :
MoinMoin is an advanced, easy to use and extensible WikiEngine with a large
community of users. Said in a few words, it is about collaboration on easily
editable web pages.

--------------------------------------------------------------------------------
Update Information:

Update moin to 1.6.4. Fix the following CVEs: CVE-2008-0781 (again),
CVE-2008-3381, CVE-2009-0260, CVE-2009-0312. Fix AttachFile escaping problems,
upstream 1.7 changeset 5f51246a4df1 backported.
--------------------------------------------------------------------------------
ChangeLog:

* Mon Apr 20 2009 Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> 1.6.4-1
- Update to 1.6.4
- CVE-2008-3381 fixed upstream
- Re-fix CVE-2008-0781, upstream seems to have dropped the fix in 1.6,
  used part of upstream 1.5 db212dfc58ef, backported upstream 1.7 5f51246a4df1
  and 269a1fbc3ed7
- Fix CVE-2009-0260, patch from Debian etch
- Fix CVE-2009-0312
- Fix AttachFile escaping problems, backported upstream 1.7 5c4043e651b3
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #457362 - CVE-2008-3381 moin: XSS issue in the advanced search form
        https://bugzilla.redhat.com/show_bug.cgi?id=457362
  [ 2 ] Bug #481547 - CVE-2009-0260 moin: tachFile XSS issues
        https://bugzilla.redhat.com/show_bug.cgi?id=481547
  [ 3 ] Bug #432748 - CVE-2008-0781 MoinMoin multiple XSS in AttachFile action
        https://bugzilla.redhat.com/show_bug.cgi?id=432748
  [ 4 ] Bug #482791 - CVE-2009-0312 moin: XSS issue in antispam
        https://bugzilla.redhat.com/show_bug.cgi?id=482791
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update moin' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------