Synopsis:	Moderate: git security update
Issue date:	2010-12-21
CVE Names:	CVE-2010-3906

A cross-site scripting (XSS) flaw was found in gitweb, a simple web
interface for Git repositories. A remote attacker could perform an XSS
attack against victims by tricking them into visiting a 
specially-crafted gitweb URL. (CVE-2010-3906)

SL 6.x

      SRPMS:
git-1.7.1-2.el6_0.1.src.rpm
      i386:
emacs-git-1.7.1-2.el6_0.1.noarch.rpm
emacs-git-el-1.7.1-2.el6_0.1.noarch.rpm
git-1.7.1-2.el6_0.1.i686.rpm
git-all-1.7.1-2.el6_0.1.noarch.rpm
git-cvs-1.7.1-2.el6_0.1.noarch.rpm
git-daemon-1.7.1-2.el6_0.1.i686.rpm
git-email-1.7.1-2.el6_0.1.noarch.rpm
git-gui-1.7.1-2.el6_0.1.noarch.rpm
gitk-1.7.1-2.el6_0.1.noarch.rpm
git-svn-1.7.1-2.el6_0.1.noarch.rpm
gitweb-1.7.1-2.el6_0.1.noarch.rpm
perl-Git-1.7.1-2.el6_0.1.noarch.rpm
      x86_64:
emacs-git-1.7.1-2.el6_0.1.noarch.rpm
emacs-git-el-1.7.1-2.el6_0.1.noarch.rpm
git-1.7.1-2.el6_0.1.x86_64.rpm
git-all-1.7.1-2.el6_0.1.noarch.rpm
git-cvs-1.7.1-2.el6_0.1.noarch.rpm
git-daemon-1.7.1-2.el6_0.1.x86_64.rpm
git-email-1.7.1-2.el6_0.1.noarch.rpm
git-gui-1.7.1-2.el6_0.1.noarch.rpm
gitk-1.7.1-2.el6_0.1.noarch.rpm
git-svn-1.7.1-2.el6_0.1.noarch.rpm
gitweb-1.7.1-2.el6_0.1.noarch.rpm
perl-Git-1.7.1-2.el6_0.1.noarch.rpm

-Connie Sieh
-Troy Dawson