U radu programskog paketa perl-Mail-Box, distribuiranog s operacijskim sustavom Fedora 13, uvedena je nova sigurnosna funckionalnost. Perl-Mail-Box je moderan alat za upravljanje mapama elektroničke pošte (eng. mail-folder manager). Alat u novoj inačici uvodi slučajne vrijednosti koje se koriste za određivanje memorijskih granica kako bi se izbjegli mogući rizici kod napada pogađanjem granica. Budući da je izdana nova inačica alata, svim korisnicima se, u svrhu bolje sigurnosne zaštite, savjetuje njezina instalacija.
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-2531
2011-03-03 07:54:02
--------------------------------------------------------------------------------
Name : perl-Mail-Box
Product : Fedora 13
Version : 2.097
Release : 1.fc13
URL : http://search.cpan.org/dist/Mail-Box/
Summary : Manage a mailbox, a folder with messages
Description :
The Mail::Box folder is a modern mail-folder manager -- at least at
the moment of this writing ;) It is written to replace Mail::Folder,
although its interface is different.
--------------------------------------------------------------------------------
Update Information:
Update perl-Mail-Box to 2.097.
No longer require spamassassin.
2.097 now randomizes boundary string to avoid (undemonstrated) security risks
with boundary guessing.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 2 2011 Tom Callaway <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 2.097-1
- update to 2.097
- remove Mail::SpamAssassin from BuildRequires
- filter Mail::SpamAssassin out of Requires
* Tue Feb 8 2011 Fedora Release Engineering <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- 2.095-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Mon Dec 20 2010 Marcela Maslanova <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 2.095-2
- 661697 rebuild for fixing problems with vendorach/lib
* Mon Jul 12 2010 Tom "spot" Callaway <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 2.095-1
- update to 2.095
* Mon May 3 2010 Marcela Maslanova <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 2.091-3
- Mass rebuild with perl-5.12.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #647783 - perl-Mail-Box shouldn't force spamassassin to be
installed
https://bugzilla.redhat.com/show_bug.cgi?id=647783
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-Mail-Box' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list
Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.
https://admin.fedoraproject.org/mailman/listinfo/package-announce
Posljednje sigurnosne preporuke