| |||||||||||||||||||
Fedora alert FEDORA-2013-12908 (npm)
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2013-12908 2013-07-13 00:22:15 -------------------------------------------------------------------------------- Name : npm Product : Fedora 19 Version : 1.3.3 Release : 1.fc19 URL : http://npmjs.org/ Summary : Node.js Package Manager Description : npm is a package manager for node.js. You can use it to install and publish your node programs. It manages dependencies and does other cool stuff. -------------------------------------------------------------------------------- Update Information: Update to the latest version of npm, fixing several bugs including a minor security bug. For more information about recent changes in npm, see the changelog at GitHub: https://github.com/isaacs/npm/commits/v1.3.3 -------------------------------------------------------------------------------- ChangeLog: * Fri Jul 12 2013 T.C. Hollingsworth <tchollingsworth@gmail.com> - 1.3.3-1 - new upstream release 1.3.3 - fixes insecure temporary directory generation (CVE-2013-4116; RHBZ#983917) * Sun Jun 23 2013 T.C. Hollingsworth <tchollingsworth@gmail.com> - 1.3.0-1 - new upstream release 1.3.0 - use system paths for manual pages and documentation (RHBZ#953051) * Sat Jun 22 2013 T.C. Hollingsworth <tchollingsworth@gmail.com> - 1.2.17-6 - restrict to compatible arches -------------------------------------------------------------------------------- References: [ 1 ] Bug #983918 - npm: CVE-2013-4116 npm: Insecure temporary directory generation [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=983918 [ 2 ] Bug #984202 - nodejs-npmlog must be updated because of new npm-1.3.3 https://bugzilla.redhat.com/show_bug.cgi?id=984202 [ 3 ] Bug #985305 - Dependency problem when updating to nodejs-lru-cache-2.3.0 https://bugzilla.redhat.com/show_bug.cgi?id=985305 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update npm' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-... (Log in to post comments)
|
|||||||||||||||||||