Fedora alert FEDORA-2011-4911 (python-feedparser)
| From: | updates@fedoraproject.org | |
| To: | package-announce@lists.fedoraproject.org | |
| Subject: | [SECURITY] Fedora 13 Update: python-feedparser-5.0.1-1.fc13 | |
| Date: | Mon, 25 Apr 2011 20:53:09 +0000 | |
| Message-ID: | <20110425205309.9D1B2110901@bastion02.phx2.fedoraproject.org> | |
| Archive‑link: | Article |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2011-4911 2011-04-06 21:48:56 -------------------------------------------------------------------------------- Name : python-feedparser Product : Fedora 13 Version : 5.0.1 Release : 1.fc13 URL : http://feedparser.org/ Summary : Parse RSS and Atom feeds in Python Description : Universal Feed Parser is a Python module for downloading and parsing syndicated feeds. It can handle RSS 0.90, Netscape RSS 0.91, Userland RSS 0.91, RSS 0.92, RSS 0.93, RSS 0.94, RSS 1.0, RSS 2.0, Atom 0.3, Atom 1.0, and CDF feeds. It also parses several popular extension modules, including Dublin Core and Apple's iTunes extensions. -------------------------------------------------------------------------------- Update Information: Current release: 5.0.1 - February 20, 2011 * Fix issue 91 (invalid text in XML declaration causes sanitizer to crash) * Fix issue 254 (sanitization can be bypassed by malformed XML comments) * Fix issue 255 (sanitizer doesn't strip unsafe URI schemes) Previous release: 5.0 - January 25, 2011 * Improved MathML support * Support microformats (rel-tag, rel-enclosure, xfn, hcard) * Support IRIs * Allow safe CSS through sanitization * Allow safe HTML5 through sanitization * Support SVG * Support inline XML entity declarations * Support unescaped quotes and angle brackets in attributes * Support additional date formats * Added the request_headers argument to parse() * Added the response_headers argument to parse() * Support multiple entry, feed, and source authors * Officially make Python 2.4 the earliest supported version * Support Python 3 * Bug fixes, bug fixes, bug fixes -------------------------------------------------------------------------------- ChangeLog: * Tue Apr 5 2011 Luke Macken <lmacken@redhat.com> - 5.0.1-1 - Latest upstream release - Remove feedparser_utf8_decoding.patch - Remove democracynow_feedparser_fix.patch - Run the test suite * Tue Feb 8 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4.1-13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild * Thu Jul 22 2010 David Malcolm <dmalcolm@redhat.com> - 4.1-12 - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRe... -------------------------------------------------------------------------------- References: [ 1 ] Bug #684877 - CVE-2009-5065 CVE-2011-1156 CVE-2011-1157 CVE-2011-1158 python-feedparser: multiple flaws corrected in version 5.1 https://bugzilla.redhat.com/show_bug.cgi?id=684877 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update python-feedparser' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-...