Stay Secure with the Latest Linux Advisories

security advisorysecurity updateFedora

Fedora 30: Yaws Security Update - Critical Enhancements and Fixes

* Yaws ver. 2.0.6. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-aa7f37cd4d 2019-04-14 00:01:14.812568 --------------------------------------------------------------------------------Name : yaws Product : Fedora 30 Version : 2.0.6 Release : 1.fc30 URL : Summary : Web server for dynamic content written in Erlang Description : HTTP 1.0 and HTTP 1.1 web server capable of both static content page delivery and dynamic content generation using embedded Erlang code in the HTML pages. It provides virtual hosting capabilities and implements HTTP tracing and other debugging functionality such as interactive interpreter environment. Performance can be boosted with built-in support for RAM caching and streaming capabilities of dynamically generated content. Among security features are SSL and support for WWW-Authenticated pages. --------------------------------------------------------------------------------Update Information: * Yaws ver. 2.0.6 --------------------------------------------------------------------------------References: [ 1 ] Bug #1606767 - yaws: FTBFS in Fedora rawhide https://bugzilla.redhat.com/show_bug.cgi?id=1606767 [ 2 ] Bug #1357922 - CVE-2016-1000108 yaws: sets environmental variable based on user supplied Proxy request header [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1357922 [ 3 ] Bug #1676256 - yaws: FTBFS in Fedora rawhide/f30 https://bugzilla.redhat.com/show_bug.cgi?id=1676256 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-aa7f37cd4d' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by theFedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . --------------------------------------------------------------------------------Fedora Update Notifi. --------------------------------------------------------------------------------fe. . Severity: Critical. LinuxSecurity.com Team

Apr 13, 2019 •Critical Fedora