Stay Secure with the Latest Linux Advisories

security advisorycriticalFedora

Fedora 22 CABAL-2015-8206 Critical Update: Upload Command Security

Force cabal upload to always use digest auth and never basic auth Note this only affects uploading of new source tarballs to Hackage by Haskell upstream package maintainers. It is safer to upload packages via the Hackage web interface.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-8206 2015-05-14 20:20:21 -------------------------------------------------------------------------------- Name : cabal-install Product : Fedora 22 Version : 1.18.1.0 Release : 1.fc22 URL : https://hackage.haskell.org/package/cabal-install Summary : Command-line interface for Cabal and Hackage Description : The 'cabal' command-line program simplifies the process of managing Haskell software by automating the fetching, configuration, compilation and installation of Haskell libraries and programs from Hackage. -------------------------------------------------------------------------------- Update Information: Force cabal upload to always use digest auth and never basic auth Note this only affects uploading of new source tarballs to Hackage by Haskell upstream package maintainers. It is safer to upload packages via the Hackage web interface. -------------------------------------------------------------------------------- ChangeLog: * Wed May 13 2015 Jens Petersen - 1.18.1.0-1 - security version update for upload command -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update cabal-install' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailinglist This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/ . Crucial notice regarding cabal-install for Fedora 22 enhances upload protection through compulsory digest verification.. Cabal Install Update, Fedora Security Notification, Haskell Software Management. . Severity: Critical. LinuxSecurity.com Team

Jun 10, 2015 •Critical Fedora