The remote host is missing an update to viewvc announced via advisory FEDORA-2009-8501.

Apply the appropriate updates. This update can be installed with the yum update program. Use su -c 'yum update viewvc' at the command line. For more information, refer to Managing Software with yum, available at http://docs.fedoraproject.org/yum/. https://secure1.securityspace.com/smysecure/catid.html?in=FEDORA-2009-8501

Update Information: CHANGES in 1.0.9: - security fix: validate the 'view' parameter to avoid XSS attack - security fix: avoid printing illegal parameter names and values Also includes: Patch by Patrick Monnerat to make allow_tar work on F-10. ChangeLog: * Wed Aug 12 2009 Bojan Smojver - 1.0.9-1 - bump up to 1.0.9 - security fix: validate the 'view' parameter to avoid XSS attack - security fix: avoid printing illegal parameter names and values * Tue Aug 11 2009 Bojan Smojver - 1.0.8-2 - fix allow_tar - patch by Patrick Monnerat

• https://bugzilla.redhat.com/show_bug.cgi?id=513006

---

Updated on 2015-03-25