U radu programskog paketa PolarSSL, namijenjenog za Fedoru 17, uočen je novi sigurnosni propust kojeg udaljeni napadač može iskoristiti za otkrivanje i izmjenu osjetljivih informacija.

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-6963
2012-04-30 18:43:20
--------------------------------------------------------------------------------

Name        : polarssl
Product     : Fedora 17
Version     : 1.1.3
Release     : 1.fc17
URL         : http://polarssl.org/
Summary     : Light-weight cryptographic and SSL/TLS library
Description :
PolarSSL is a light-weight open source cryptographic and SSL/TLS
library written in C. PolarSSL makes it easy for developers to include
cryptographic and SSL/TLS capabilities in their (embedded)
applications with as little hassle as possible.

--------------------------------------------------------------------------------
Update Information:

A security and bugfix release to PolarSSL
http://polarssl.org/news
http://polarssl.org/trac/wiki/SecurityAdvisory201201
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update polarssl' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list
Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.
https://admin.fedoraproject.org/mailman/listinfo/package-announce