Stay Secure with the Latest Linux Advisories

security advisoryupdatecritical

Fedora 22: 2015-5938 Critical Update for JLine DoS Vulnerability

Security fix for CVE-2013-1752 and update to latest upstream release of jython.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-5938 2015-04-10 17:05:06 -------------------------------------------------------------------------------- Name : jline Product : Fedora 22 Version : 2.12.1 Release : 1.fc22 URL : https://github.com/jline/jline2 Summary : JLine is a Java library for handling console input Description : JLine is a Java library for handling console input. It is similar in functionality to BSD editline and GNU readline. People familiar with the readline/editline capabilities for modern shells (such as bash and tcsh) will find most of the command editing features of JLine to be familiar. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2013-1752 and update to latest upstream release of jython. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1046174 - CVE-2013-1752 python: multiple unbound readline() DoS flaws in python stdlib https://bugzilla.redhat.com/show_bug.cgi?id=1046174 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update jline' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/ . Important security patch for jline resolving CVE-2013-1752 issue in Fedora 22, enhancing functionality andprotection.. Fedora 22 Security, JLine Library, Console Input Handling. . Severity: Critical. LinuxSecurity.com Team

Apr 21, 2015 •Critical Fedora