You are here
Home > Preporuke > Sigurnosni nedostaci programskog paketa python-jsonrpclib

Sigurnosni nedostaci programskog paketa python-jsonrpclib

  • Detalji os-a: WN7
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LFE

——————————————————————————–
Fedora Update Notification
FEDORA-2018-92de33f3b9
2018-01-10 20:51:05.568058
——————————————————————————–

Name : python-jsonrpclib
Product : Fedora 26
Version : 0.3.1
Release : 1.fc26
URL : http://github.com/tcalmant/jsonrpclib/
Summary : JSON-RPC v2.0 client library for Python
Description :
This project is an implementation of the JSON-RPC v2.0 specification
(backwards-compatible) as a client library, for Python 2.7 and Python 3.
This version is a fork of jsonrpclib by Josh Marshall, usable with Pelix
remote services.

——————————————————————————–
Update Information:

Depenency for Electrum that have a security issue in all the releases.
——————————————————————————–
References:

[ 1 ] Bug #1532555 – electrum: Unprotected JSON-RPC interface [fedora-26]
https://bugzilla.redhat.com/show_bug.cgi?id=1532555
——————————————————————————–

This update can be installed with the “dnf” update program. Use
su -c ‘dnf upgrade python-jsonrpclib’ at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list — package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

 

 

——————————————————————————–

Fedora Update Notification

FEDORA-2018-b7e606d011

2018-01-10 20:51:05.568143

——————————————————————————–

 

Name        : electrum

Product     : Fedora 26

Version     : 3.0.5

Release     : 1.fc26

URL         : https://electrum.org/

Summary     : A lightweight Bitcoin Client

Description :

Electrum is an easy to use Bitcoin client. It protects you from losing

coins in a backup mistake or computer failure, because your wallet can

be recovered from a secret phrase that you can write on paper or learn

by heart. There is no waiting time when you start the client, because

it does not download the Bitcoin block chain.

 

——————————————————————————–

Update Information:

 

Depend on https://bodhi.fedoraproject.org/updates/FEDORA-2018-92de33f3b9

——————————————————————————–

References:

 

  [ 1 ] Bug #1532554 – electrum: Unprotected JSON-RPC interface

        https://bugzilla.redhat.com/show_bug.cgi?id=1532554

——————————————————————————–

 

This update can be installed with the “dnf” update program. Use

su -c ‘dnf upgrade electrum’ at the command line.

For more information, refer to the dnf documentation available at

http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

 

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/keys

——————————————————————————–

_______________________________________________

package-announce mailing list — package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

 

 

——————————————————————————–

Fedora Update Notification

FEDORA-2018-9e37c33e3f

2018-01-10 20:51:03.122855

——————————————————————————–

 

Name        : electron-cash

Product     : Fedora 27

Version     : 3.1.2

Release     : 1.fc27

URL         : https://electroncash.org/

Summary     : A lightweight Bitcoin Cash client

Description :

Electron Cash is an easy to use Bitcoin Cash client. It protects you from losing

coins in a backup mistake or computer failure, because your wallet can

be recovered from a secret phrase that you can write on paper or learn

by heart. There is no waiting time when you start the client, because

it does not download the Bitcoin block chain.

 

——————————————————————————–

Update Information:

 

Yet another security issue

——————————————————————————–

 

This update can be installed with the “dnf” update program. Use

su -c ‘dnf upgrade electron-cash’ at the command line.

For more information, refer to the dnf documentation available at

http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

 

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/keys

——————————————————————————–

_______________________________________________

package-announce mailing list — package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

AutorVlatka Misic
Cert idNCERT-REF-2018-01-0072-ADV
CveCERT-CVE-DUMMY
ID izvornikaCERT-ORIGID-DUMMY
ProizvodCERT-DUMMY-PRODUCT
Izvorhttp://www.adobe.com/
Top
More in Preporuke
Sigurnosni nedostaci programskog paketa heketi

Otkriveni su sigurnosni nedostaci u programskom paketu heketi za operacijski sustav Fedora. Otkriveni nedostaci potencijalnim napadačima omogućuju izvršavanje proizvoljnog programskog...

Close