Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 528
Alerts This Week
Warning Icon 1 528

Fedora 24: 2017-75xyz1a2b3c Critical: Ruby-On-Rails Security Patch

fedora
Calendar Grey February 12, 2016
Dist Fedora Esm H88
An important patch for Fedora 23 focusing on python-pymongo security flaws in order to strengthen system reliability.
Security fix for CVE-2013-2099, CVE-2013-7440

Summary

The Python driver for MongoDB.

Update Information:

Security fix for CVE-2013-2099, CVE-2013-7440

Change Log

References


[ 1 ] Bug #1224999 - CVE-2013-7440 python: wildcard matching rules do not follow RFC 6125 https://bugzilla.redhat.com/show_bug.cgi?id=1224999 [ 2 ] Bug #963260 - CVE-2013-2099 python: ssl.match_hostname() DoS via certificates with specially crafted hostname wildcard patterns https://bugzilla.redhat.com/show_bug.cgi?id=963260

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update python-pymongo' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: python-pymongo
Product: Fedora 23
Version: 2.5.2
Release: 8.fc23
Summary: Python driver for MongoDB

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.