Bug#671482: CVE-2009-5024: Possible excessive resource use when commit database feature enabled

2012-05-12 Thread Ben Hutchings
I've downgraded this because it does not affect the default configuration. It only affects installations which use the optional feature to use a MySQL database of commits. I'm attaching a debdiff for the changes in case if anyone thinks they should be applied in isolation (perhaps as a stable-sec

Bug#671482: CVE-2009-5024

2012-05-04 Thread Moritz Muehlenhoff
Package: viewvc Severity: grave Tags: security Please see https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-5024 for details. Fixed in 1.1.11 Cheers, Moritz -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact lis