| |||||||||||||||||||
Fedora alert FEDORA-2013-13140 (python-pip)
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2013-13140 2013-07-18 02:29:35 -------------------------------------------------------------------------------- Name : python-pip Product : Fedora 18 Version : 1.3.1 Release : 4.fc18 URL : http://www.pip-installer.org Summary : A tool for installing and managing Python packages Description : Pip is a replacement for `easy_install <http://peak.telecommunity.com/DevCenter/EasyInstall>`_. It uses mostly the same techniques for finding packages, so packages that were made easy_installable should be pip-installable as well. -------------------------------------------------------------------------------- Update Information: Fix potential DOS with specially crafted malicious SSL certs. Backing out rename of pip binary to fix #958377 and updating package summary to match upstream's description. Backing out rename of pip binary to fix #958377 and updating package summary to match upstream's description. -------------------------------------------------------------------------------- ChangeLog: * Tue Jul 16 2013 Toshio Kuratomi <toshio@fedoraproject.org> - 1.3.1-4 - Fix for CVE 2013-2099 * Thu May 23 2013 Tim Flink <tflink@fedoraproject.org> - 1.3.1-3 - undo python2 executable rename to python-pip. fixes #958377 - fix summary to match upstream * Mon May 6 2013 Kevin Kofler <Kevin@tigcc.ticalc.org> - 1.3.1-2 - Fix main package Summary, it's for Python 2, not 3 (#877401) * Fri Apr 26 2013 Jon Ciesla <limburgher@gmail.com> - 1.3.1-1 - Update to 1.3.1, fix for CVE-2013-1888. * Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #963260 - CVE-2013-2098 CVE-2013-2099 python: ssl.match_hostname() DoS via certificates with specially crafted hostname wildcard patterns https://bugzilla.redhat.com/show_bug.cgi?id=963260 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update python-pip' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-... (Log in to post comments)
|
|||||||||||||||||||