Überschreiben von Dateien in Poco
ID: | FEDORA-2018-ef9e28d9e4 |
Distribution: | Fedora |
Plattformen: | Fedora 27 |
Datum: | Fr, 26. Januar 2018, 19:38 |
Referenzen: | https://bugzilla.redhat.com/show_bug.cgi?id=1532129
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000472 |
Applikationen: | Poco |
Originalnachricht |
|
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2018-ef9e28d9e4 2018-01-26 18:09:10.127276 -------------------------------------------------------------------------------- Name : poco Product : Fedora 27 Version : 1.7.8p3 Release : 3.fc27 URL : http://pocoproject.org Summary : C++ class libraries for network-centric applications Description : The POCO C++ Libraries (POCO stands for POrtable COmponents) are open source C++ class libraries that simplify and accelerate the development of network-centric, portable applications in C++. The POCO C++ Libraries are built strictly on standard ANSI/ISO C++, including the standard library. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2017-1000472 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1532129 - poco: Improper path restriction in ZipCommon.cpp allows for arbitrary files to be written https://bugzilla.redhat.com/show_bug.cgi?id=1532129 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade poco' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org |