Fedora alert FEDORA-2008-0299 (python-cherrypy)

From:
    	     
 
updates@fedoraproject.org
To:
    	     
 
fedora-package-announce@redhat.com
Subject:
    	     
 
[SECURITY] Fedora 8 Update: python-cherrypy-2.2.1-8.fc8
Date:
    	     
 
Sun, 06 Jan 2008 18:22:10 -0700
Message-ID:
    	     
 
<200801070122.m071M3cI001823@bastion.fedora.phx.redhat.com>
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-0299
2008-01-07 00:47:22
--------------------------------------------------------------------------------

Name        : python-cherrypy
Product     : Fedora 8
Version     : 2.2.1
Release     : 8.fc8
URL         : http://www.cherrypy.org/
Summary     : A pythonic, object-oriented web development framework
Description :
CherryPy allows developers to build web applications in much the same way
they would build any other object-oriented Python program. This usually
results in smaller source code developed in less time.

--------------------------------------------------------------------------------
Update Information:

Security issue fixed with a backport from upstream.
--------------------------------------------------------------------------------
ChangeLog:

--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #427664 - CherryPy security hole still unpatched: Malicious cookies may allow access to
files outside the session directory
        https://bugzilla.redhat.com/show_bug.cgi?id=427664
--------------------------------------------------------------------------------
Updated packages:

bf5bdd1fd51546d1b5ac096f71265ef31f8f910d python-cherrypy-2.2.1-8.fc8.noarch.rpm
7b3d6bac94ed59f2e4b5c3a4c780f53d6fa8fd57 python-cherrypy-2.2.1-8.fc8.src.rpm

This update can be installed with the "yum" update program.  Use 
su -c 'yum update python-cherrypy' 
at the command line.  For more information, refer to "Managing Software
with yum", available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------

_______________________________________________
Fedora-package-announce mailing list
Fedora-package-announce@redhat.com
http://www.redhat.com/mailman/listinfo/fedora-package-ann...