Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

Fedora 20: 2015-4554 Moderate: Rest OAuth Memory Corruption

fedora
Calendar Grey April 18, 2015
Scroller Fedora
Fedora 20 released a patch addressing a memory corruption vulnerability in its rest library, caused by incorrect OAuth settings to boost security and stability
CVE-2015-2675 rest: memory corruption when using oauth because of implicit declaration of rest_proxy_call_get_url

Summary

This library was designed to make it easier to access web services that

claim to be "RESTful". A RESTful service should have urls that represent

remote objects, which methods can then be called on. The majority of services

don't actually adhere to this strict definition. Instead, their RESTful end

point usually has an API that is just simpler to use compared to other types

of APIs they may support (XML-RPC, for instance). It is this kind of API that

this library is attempting to support.

Update Information:

CVE-2015-2675 rest: memory corruption when using oauth because of implicit declaration of rest_proxy_call_get_url

Topics%20covered

Topics Covered

security advisory Fedora memory corruption rest library oauth issue

Change Log

* Wed Mar 18 2015 Kalev Lember - 0.7.93-1 - Update to 0.7.93 - Tighten deps with the _isa macro - Don't manually require pkgconfig; rpmbuild generates this automatically - Use license macro for the COPYING file * Fri Jan 9 2015 Debarshi Ray 0.7.92-6 - Backport upstream patch to fix a memory error (GNOME #742644) * Wed Sep 3 2014 Peter Robinson 0.7.92-5 - Update to 0.7.92 * Sun Aug 17 2014 Fedora Release Engineering - 0.7.91-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Wed Aug 6 2014 Peter Robinson 0.7.91-4 - Drop old patch that doesn't appear to be needed any more and causes build issues * Tue Jul 22 2014 Kalev Lember - 0.7.91-3 - Rebuilt for gobject-introspection 1.41.4 * Sun Jun 8 2014 Fedora Release Engineering - 0.7.91-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Tue Mar 11 2014 Richard Hughes - 0.7.91-1 - Update to 0.7.91

References


[ 1 ] Bug #1112497 - Please update to librest 0.7.91 in f20 https://bugzilla.redhat.com/show_bug.cgi?id=1112497 [ 2 ] Bug #1204682 - rest: memory corruption when using oauth because of implicit declaration of rest_proxy_call_get_url [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1204682

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update rest' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
important
Lowest
Low
Medium
High
Critical

Name: rest
Product: Fedora 20
Version: 0.7.93
Release: 1.fc20
URL: https://www.gnome.org/
Summary: A library for access to RESTful web services

Topics%20covered

Topics Covered

security advisory Fedora memory corruption rest library oauth issue

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.