Stay Secure with the Latest Linux Advisories

security advisorysecurity issuesoftware update

Fedora 33 Update: Batik SSRF Threat - Moderate Severity Alert

Enforce minimal build as jython is orphaned. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-33a1b73e48 2021-04-16 14:33:16.807687 --------------------------------------------------------------------------------Name : batik Product : Fedora 33 Version : 1.14 Release : 2.fc33 URL : https://xmlgraphics.apache.org/batik/ Summary : Scalable Vector Graphics for Java Description : Batik is a Java(tm) technology based toolkit for applications that want to use images in the Scalable Vector Graphics (SVG) format for various purposes, such as viewing, generation or manipulation. --------------------------------------------------------------------------------Update Information: Enforce minimal build as jython is orphaned --------------------------------------------------------------------------------ChangeLog: * Tue Mar 9 2021 Aleksandar Kurtakov - 1.14-2 - Enforce minimal build as jython is orphaned * Mon Mar 1 2021 Jie Kang - 1.14-1 - Update to latest upstream release * Tue Jan 26 2021 Fedora Release Engineering - 1.13-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild --------------------------------------------------------------------------------References: [ 1 ] Bug #1933808 - CVE-2020-11987 batik: SSRF due to improper input validation by the NodePickerPanel https://bugzilla.redhat.com/show_bug.cgi?id=1933808 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-33a1b73e48' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure . Notification on Fedora 33 concerning Batik updates, implementing strict build criteria and resolving unmaintained jython instances.. Batik Update, Fedora 33 Security, Java Toolkits, SVG Manipulation, Software Upgrade. . LinuxSecurity.com Team

Apr 16, 2021 Fedora