Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 34: FEDORA-2021-5bbf51d86d Security Advisory for Mojolicious

fedora
Calendar Grey July 8, 2021
Dist Fedora Esm H88
Critical session security patches applied to perl-Mojolicious in Fedora. Ensure to restart services post-installation.
This update backports some significant security fixes relating to session security from the upstream 9.19 release

Summary

Back in the early days of the web there was this wonderful Perl library

called CGI, many people only learned Perl because of it. It was simple

enough to get started without knowing much about the language and powerful

enough to keep you going, learning by doing was much fun. While most of the

techniques used are outdated now, the idea behind it is not. Mojolicious is

a new attempt at implementing this idea using state of the art technology.

This update backports some significant security fixes relating to session

security from the upstream 9.19 release. See

https://github.com/mojolicious/mojo/pull/1791 and https://github.com/mojolicious

/mojo/commit/3f10b6af0271c4b5b589d2d9c31ea43c8e9087d6 for more details. Please

restart any running services that use Mojolicious after installing the update.

* Wed Jun 30 2021 Adam Williamson - 8.73-2

- Backport session security fixes from 9.19

su -c 'dnf upgrade --advisory FEDORA-2021-5bbf51d86d' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

Change Log

References

Update Instructions

Severity
important
Lowest
Low
Medium
High
Critical

Product: Fedora 34
Version: 8.73
Release: 2.fc34
Summary: A next generation web framework for Perl

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here