----------------------------------------------------------------------

A new version (0.9.0.0 - Release Candidate 1) of the free Secunia PSI
has been released. The new version includes many new and advanced
features, which makes it even easier to stay patched.

Download and test it today:
https://psi.secunia.com/

Read more about this new version:
https://psi.secunia.com/?page=changelog

----------------------------------------------------------------------

TITLE:
Fedora update for mantis

SECUNIA ADVISORY ID:
SA28352

VERIFY ADVISORY:
http://secunia.com/advisories/28352/

CRITICAL:
Less critical

IMPACT:
Cross Site Scripting

WHERE:
>From remote

OPERATING SYSTEM:
Fedora 7
http://secunia.com/product/15552/
Fedora 8
http://secunia.com/product/16769/

DESCRIPTION:
Fedora has issued an update for mantis. This fixes a vulnerability,
which can be exploited by malicious users to conduct script insertion
attacks.

For more information:
SA28185

SOLUTION:
Apply updated packages.

-- Fedora 7 --

ce45d334069c3bb251ce07951d52061f74db6495
mantis-config-httpd-1.1.0-1.fc7.noarch.rpm
d0a7684c55a7893859479e677b0327f6c28f993c
mantis-1.1.0-1.fc7.noarch.rpm
d6494ebcafee111b06ff3577620f769d46bfaedb mantis-1.1.0-1.fc7.src.rpm

-- Fedora 8 --

2f1ef51b26211083f722a10f0a16c588b7d007fe
mantis-config-httpd-1.1.0-1.fc8.noarch.rpm
3055bf43d1633d367771c4239dfd57b33a997933
mantis-1.1.0-1.fc8.noarch.rpm
b3292df0950a4ebab4443cb49764bab2d7737f5c mantis-1.1.0-1.fc8.src.rpm

ORIGINAL ADVISORY:
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00227.html
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00309.html

OTHER REFERENCES:
SA28185:
http://secunia.com/advisories/28185/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------