drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Mangelnde Rechteprüfung in Netty
Name: |
Mangelnde Rechteprüfung in Netty |
|
ID: |
FEDORA-2015-8684 |
|
Distribution: |
Fedora |
|
Plattformen: |
Fedora 22 |
|
Datum: |
Sa, 30. Mai 2015, 18:40 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2156 |
|
Applikationen: |
Netty |
|
Originalnachricht |
Name : netty Product : Fedora 22 Version : 4.0.28 Release : 1.fc22 URL : https://netty.io/ Summary : An asynchronous event-driven network application framework and tools for Java Description : Netty is a NIO client server framework which enables quick and easy development of network applications such as protocol servers and clients. It greatly simplifies and streamlines network programming such as TCP and UDP socket server.
'Quick and easy' doesn't mean that a resulting application will suffer from a maintainability or a performance issue. Netty has been designed carefully with the experiences earned from the implementation of a lot of protocols such as FTP, SMTP, HTTP, and various binary and text-based legacy protocols. As a result, Netty has succeeded to find a way to achieve ease of development, performance, stability, and flexibility without a compromise.
------------------------------------------------------------------------------- - Update Information:
Security fix for CVE-2015-2156 ------------------------------------------------------------------------------- - ChangeLog:
* Wed May 20 2015 Severin Gehwolf <sgehwolf@redhat.com> - 4.0.28-1 - Update to upstream 4.0.28 release. - Fixes CVE-2015-2156 (HttpOnly cookie bypass). - Resolves RHBZ#1111502 * Wed May 20 2015 Severin Gehwolf <sgehwolf@redhat.com> - 4.0.27-1 - Update to upstream 4.0.27 release. ------------------------------------------------------------------------------- - References:
[ 1 ] Bug #1222923 - CVE-2015-2156 netty: HttpOnly cookie bypass https://bugzilla.redhat.com/show_bug.cgi?id=1222923 ------------------------------------------------------------------------------- -
This update can be installed with the "yum" update program. Use su -c 'yum update netty' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys ------------------------------------------------------------------------------- - _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-announce
|
|
|
|