Summary
The remote host is missing an update to buildbot
announced via advisory FEDORA-2009-8516.
Solution
Apply the appropriate updates.
This update can be installed with the yum update program. Use su -c 'yum update buildbot' at the command line.
For more information, refer to Managing Software with yum, available at http://docs.fedoraproject.org/yum/.
https://secure1.securityspace.com/smysecure/catid.html?in=FEDORA-2009-8516
Insight
Update Information:
Update to new upstream version 0.7.11p3:
http://pypi.python.org/pypi/buildbot/0.7.11p3
fixing XSS issue detailed in upstream security alert:
http://buildbot.net/trac#SecurityAlert
ChangeLog:
* Mon Aug 17 2009 Steve 'Ashcrow' Milner - 0.7.11p3-2 - turning off tests in builds
* Mon Aug 17 2009 Steve 'Ashcrow' Milner - 0.7.11p3-1 - Update for another XSS vuln from upstream
* Thu Aug 13 2009 Steve 'Ashcrow' Milner - 0.7.11p2-1 - Update for XSS vuln from upstream
Severity
Classification
-
CVE CVE-2009-2959, CVE-2009-2967 -
CVSS Base Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N
Related Vulnerabilities