The remote host is missing an update to mapserver announced via advisory FEDORA-2009-3357.

Apply the appropriate updates. This update can be installed with the yum update program. Use su -c 'yum update mapserver' at the command line. For more information, refer to Managing Software with yum, available at http://docs.fedoraproject.org/yum/. https://secure1.securityspace.com/smysecure/catid.html?in=FEDORA-2009-3357

Update Information: The releases contain fixes for issues discovered in an audit of the CGI by a 3rd party (tickets #2939, #2941, #2942, #2943 and #2944). The issues are detailed at: http://trac.osgeo.org/mapserver/ticket/2939 http://trac.osgeo.org/mapserver/ticket/2941 http://trac.osgeo.org/mapserver/ticket/2942 http://trac.osgeo.org/mapserver/ticket/2943 http://trac.osgeo.org/mapserver/ticket/2944 Also provided is support for RFC-56 that addresses tightening up the control of access to mapfiles and templates: http://mapserver.org/development/rfc/ms-rfc-56.html ChangeLog: * Sun Apr 5 2009 Devrim GUNDUZ - 5.2.2-1 - Update to 5.2.2 which fixes : CVE-2009-0839, CVE-2009-0840, CVE-2009-0841, CVE-2009-0842, CVE-2009-0843, CVE-2009-1176, CVE-2009-1177.

• https://bugzilla.redhat.com/show_bug.cgi?id=493364

---

Updated on 2015-03-25