Re: pkg/44263: ViewVC 1.0.10 has a cross-site-scripting vulnerability

["OBATA Akio" <obache%netbsd.org@localhost>]

The following reply was made to PR pkg/44263; it has been noted by GNATS.

From: "OBATA Akio" <obache%netbsd.org@localhost>
To: gnats-bugs%netbsd.org@localhost
Cc: 
Subject: Re: pkg/44263: ViewVC 1.0.10 has a cross-site-scripting vulnerability
Date: Thu, 23 Dec 2010 11:46:45 +0900

 On Thu, 23 Dec 2010 02:55:00 +0900, <cfuhrman%panix.com@localhost> wrote:
 
 > Apply the following patch to update to viewvc-1.0.12.  Tarball located at 
 > http://viewvc.tigris.org/files/documents/3330/47621/viewvc-1.0.12.tar.gz
 
 It is impossible to fetch it if fetch command does not support cookie (or 
cookie is disabled),
 or failed to infinity redirect.
 It is because that I gave up update it.
 
 I saw it in other times, but fixed while I was unaware.
 Then I don't know that it is a temporary issue or not.
 
 -- 
 OBATA Akio / obache%NetBSD.org@localhost