Описание
ELSA-2012-0151: conga security, bug fix, and enhancement update (MODERATE)
[0.12.2-51.0.1.el5]
- Added conga-enterprise.patch
- Added conga-enterprise-Carthage.patch to support OEL5
- Replaced redhat logo image in conga-0.12.2.tar.gz
[0.12.2-51]
- Fix bz711494 (CVE-2011-1948 plone: reflected XSS vulnerability)
- Fix bz771920 (CVE-2011-4924 Zope: Incomplete upstream patch for CVE-2010-1104/bz577019)
[0.12.2-45]
- Fix bz751359 (Add luci support for fence_ipmilan's -L option)
[0.12.2-44]
- Fix bz577019 (CVE-2010-1104 zope: XSS on error page)
[0.12.2-42]
- Fix bz755935 (luci_admin man page is misleading)
- Fix bz755941 (luci_admin restore is not consistent)
[0.12.2-40]
- Fix excluding busy nodes not working properly in luci internals.
[0.12.2-38]
- Additional fix for bz734562 (Improve Luci's resource name validation)
[0.12.2-37]
- Additional fix for bz734562 (Improve Luci's resource name validation)
[0.12.2-36]
- Bump version of the luci database.
[0.12.2-35]
- Fix bz739600 (conga allows erroneous characters in resource)
- Fix bz734562 (Improve Luci's resource name validation)
[0.12.2-34]
- Fix bz709478 (Ricci fails to detect if host if virtual machine capable)
- Fix bz723000 (Modifying an existing shared resource will not update the reference in the cluster.conf)
- Fix bz723188 (Luci does not allow to modify __max_restarts and __restart_expire_time for independent subtrees, only for non-critical resources)
[0.12.2-33]
- Fix bz732483 (Create new cluster fails with luci when installing packages.)
Обновленные пакеты
Oracle Linux 5
Oracle Linux ia64
luci
0.12.2-51.0.1.el5
ricci
0.12.2-51.0.1.el5
Oracle Linux x86_64
luci
0.12.2-51.0.1.el5
ricci
0.12.2-51.0.1.el5
Oracle Linux i386
luci
0.12.2-51.0.1.el5
ricci
0.12.2-51.0.1.el5
Связанные CVE
Связанные уязвимости
Cross-site scripting (XSS) vulnerability in Plone 4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
Cross-site scripting (XSS) vulnerability in Plone 4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
Cross-site scripting (XSS) vulnerability in Plone 4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
Cross-site scripting (XSS) vulnerability in Plone 4.1 and earlier allo ...
Cross-site scripting (XSS) vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to error messages.