Stay Secure with the Latest Linux Advisories

security advisoryfedorasoftware update

Fedora 26: FEDORA-2017-5cb8354008 Critical Static Content Access Control

Security fix for CVE-2017-16248. Catalyst::Plugin::Static::Simple has been changed to not serve static files with dots in the names (i.e. .svn, .git, ...). --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-5cb8354008 2017-11-15 19:03:16.426090 --------------------------------------------------------------------------------Name : perl-Catalyst-Plugin-Static-Simple Product : Fedora 26 Version : 0.34 Release : 1.fc26 URL : https://metacpan.org/dist/Catalyst-Plugin-Static-Simple Summary : Make serving static pages painless Description : The Static::Simple plugin is designed to make serving static content in your application during development quick and easy, without requiring a single line of code from you. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2017-16248. Catalyst::Plugin::Static::Simple has been changed to not serve static files with dots in the names (i.e. .svn, .git, ...) --------------------------------------------------------------------------------References: [ 1 ] Bug #1509181 - CVE-2017-16248 perl-Catalyst-Plugin-Static-Simple: Invalid access control https://bugzilla.redhat.com/show_bug.cgi?id=1509181 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade perl-Catalyst-Plugin-Static-Simple' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . Revise CVE-2017-16248 in perl-Catalyst-Plugin-Static-Simple to bolster security measures in Fedora 26.. Static Content Access Control, perl-Catalyst-Plugin-Static-Simple, Fedora Security Update. . Severity: Critical. LinuxSecurity.com Team

Nov 15, 2017 •Critical Fedora