[SECURITY] Fedora 9 Update: moin-1.6.4-2.fc9

updates at fedoraproject.org updates at fedoraproject.org
Thu Jun 18 11:43:30 UTC 2009


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-6559
2009-06-18 10:59:33
--------------------------------------------------------------------------------

Name        : moin
Product     : Fedora 9
Version     : 1.6.4
Release     : 2.fc9
URL         : http://moinmo.in/
Summary     : MoinMoin is a WikiEngine to collaborate on easily editable web pages
Description :
MoinMoin is an advanced, easy to use and extensible WikiEngine with a large
community of users. Said in a few words, it is about collaboration on easily
editable web pages.

--------------------------------------------------------------------------------
Update Information:

This update includes a security fix for a hierarchical ACL vulnerability
(hierarchical is not the default ACL mode), http://moinmo.in/SecurityFixes has
the details of the fix.
--------------------------------------------------------------------------------
ChangeLog:

* Sat Jun 13 2009 Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> 1.6.4-2
- Hierarchical ACL security fix from 1.8.4, 1.8 HG 897cdbe9e8f2
- Details at http://moinmo.in/SecurityFixes#moin_1.8.3
- Convert CHANGES to UTF-8
* Mon Apr 20 2009 Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> 1.6.4-1
- Update to 1.6.4
- CVE-2008-3381 fixed upstream
- Re-fix CVE-2008-0781, upstream seems to have dropped the fix in 1.6,
  used part of upstream 1.5 db212dfc58ef, backported upstream 1.7 5f51246a4df1
  and 269a1fbc3ed7
- Fix CVE-2009-0260, patch from Debian etch
- Fix CVE-2009-0312
- Fix AttachFile escaping problems, backported upstream 1.7 5c4043e651b3
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update moin' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------




More information about the Fedora-package-announce mailing list