You are here
Home > Preporuke > Sigurnosni nedostatak programskog paketa rest

Sigurnosni nedostatak programskog paketa rest

  • Detalji os-a: WN7
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LFE

——————————————————————————–
Fedora Update Notification
FEDORA-2015-4554
2015-03-26 16:38:36
——————————————————————————–

Name : rest
Product : Fedora 20
Version : 0.7.93
Release : 1.fc20
URL : http://www.gnome.org
Summary : A library for access to RESTful web services
Description :
This library was designed to make it easier to access web services that
claim to be “RESTful”. A RESTful service should have urls that represent
remote objects, which methods can then be called on. The majority of services
don’t actually adhere to this strict definition. Instead, their RESTful end
point usually has an API that is just simpler to use compared to other types
of APIs they may support (XML-RPC, for instance). It is this kind of API that
this library is attempting to support.

——————————————————————————–
Update Information:

CVE-2015-2675 rest: memory corruption when using oauth because of implicit declaration of rest_proxy_call_get_url
——————————————————————————–
ChangeLog:

* Wed Mar 18 2015 Kalev Lember <kalevlember@gmail.com> – 0.7.93-1
– Update to 0.7.93
– Tighten deps with the _isa macro
– Don’t manually require pkgconfig; rpmbuild generates this automatically
– Use license macro for the COPYING file
* Fri Jan 9 2015 Debarshi Ray <rishi@fedoraproject.org> 0.7.92-6
– Backport upstream patch to fix a memory error (GNOME #742644)
* Wed Sep 3 2014 Peter Robinson <pbrobinson@fedoraproject.org> 0.7.92-5
– Update to 0.7.92
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> – 0.7.91-5
– Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Wed Aug 6 2014 Peter Robinson <pbrobinson@fedoraproject.org> 0.7.91-4
– Drop old patch that doesn’t appear to be needed any more and causes build issues
* Tue Jul 22 2014 Kalev Lember <kalevlember@gmail.com> – 0.7.91-3
– Rebuilt for gobject-introspection 1.41.4
* Sun Jun 8 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> – 0.7.91-2
– Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Tue Mar 11 2014 Richard Hughes <rhughes@redhat.com> – 0.7.91-1
– Update to 0.7.91
——————————————————————————–
References:

[ 1 ] Bug #1112497 – Please update to librest 0.7.91 in f20
https://bugzilla.redhat.com/show_bug.cgi?id=1112497
[ 2 ] Bug #1204682 – rest: memory corruption when using oauth because of implicit declaration of rest_proxy_call_get_url [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1204682
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update rest’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2015-4596
2015-03-26 16:40:29
——————————————————————————–

Name : rest
Product : Fedora 21
Version : 0.7.93
Release : 1.fc21
URL : http://www.gnome.org
Summary : A library for access to RESTful web services
Description :
This library was designed to make it easier to access web services that
claim to be “RESTful”. A RESTful service should have urls that represent
remote objects, which methods can then be called on. The majority of services
don’t actually adhere to this strict definition. Instead, their RESTful end
point usually has an API that is just simpler to use compared to other types
of APIs they may support (XML-RPC, for instance). It is this kind of API that
this library is attempting to support.

——————————————————————————–
Update Information:

CVE-2015-2675 rest: memory corruption when using oauth because of implicit declaration of rest_proxy_call_get_url
——————————————————————————–
ChangeLog:

* Wed Mar 18 2015 Kalev Lember <kalevlember@gmail.com> – 0.7.93-1
– Update to 0.7.93
– Tighten deps with the _isa macro
– Don’t manually require pkgconfig; rpmbuild generates this automatically
– Use license macro for the COPYING file
* Fri Jan 9 2015 Debarshi Ray <rishi@fedoraproject.org> 0.7.92-6
– Backport upstream patch to fix a memory error (GNOME #742644)
——————————————————————————–
References:

[ 1 ] Bug #1112497 – Please update to librest 0.7.91 in f20
https://bugzilla.redhat.com/show_bug.cgi?id=1112497
[ 2 ] Bug #1204682 – rest: memory corruption when using oauth because of implicit declaration of rest_proxy_call_get_url [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1204682
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update rest’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

AutorMarijo Plepelic
Cert idNCERT-REF-2015-04-0012-ADV
CveCERT-CVE-DUMMY
ID izvornikaCERT-ORIGID-DUMMY
ProizvodCERT-DUMMY-PRODUCT
Izvorhttp://www.adobe.com/
Top
More in Preporuke
Sigurnosni nedostaci programskog paketa tcpdump

Otkriveni su sigurnosni nedostaci u programskom paketu tcpdump za operacijski sustav Fedora. Otkriveni nedostaci potencijalnim napadačima omogućuju izvođenje napada uskraćivanja...

Close