--------------------------------------------------------------------------------Fedora Update Notification
FEDORA-2017-184d078d87
2017-11-15 21:26:26.921852
--------------------------------------------------------------------------------Name        : perl-Catalyst-Plugin-Static-Simple
Product     : Fedora 25
Version     : 0.34
Release     : 1.fc25
URL         : https://metacpan.org/dist/Catalyst-Plugin-Static-Simple
Summary     : Make serving static pages painless
Description :
The Static::Simple plugin is designed to make serving static content in
your application during development quick and easy, without requiring a
single line of code from you.

--------------------------------------------------------------------------------Update Information:

Security fix for  CVE-2017-16248.  Catalyst::Plugin::Static::Simple has been
changed to not serve static files with dots in the names (i.e. .svn, .git, ...)
--------------------------------------------------------------------------------References:

  [ 1 ] Bug #1509181 - CVE-2017-16248 perl-Catalyst-Plugin-Static-Simple: Invalid access control
        https://bugzilla.redhat.com/show_bug.cgi?id=1509181
--------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade perl-Catalyst-Plugin-Static-Simple' at the command line.
For more information, refer to the dnf documentation available at
https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/security/
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora 25: perl-Catalyst-Plugin-Static-Simple Security Update

November 15, 2017
Security fix for CVE-2017-16248

Summary

The Static::Simple plugin is designed to make serving static content in

your application during development quick and easy, without requiring a

single line of code from you.

Security fix for CVE-2017-16248. Catalyst::Plugin::Static::Simple has been

changed to not serve static files with dots in the names (i.e. .svn, .git, ...)

[ 1 ] Bug #1509181 - CVE-2017-16248 perl-Catalyst-Plugin-Static-Simple: Invalid access control

https://bugzilla.redhat.com/show_bug.cgi?id=1509181

su -c 'dnf upgrade perl-Catalyst-Plugin-Static-Simple' at the command line.

For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

FEDORA-2017-184d078d87 2017-11-15 21:26:26.921852 Product : Fedora 25 Version : 0.34 Release : 1.fc25 URL : https://metacpan.org/dist/Catalyst-Plugin-Static-Simple Summary : Make serving static pages painless Description : The Static::Simple plugin is designed to make serving static content in your application during development quick and easy, without requiring a single line of code from you. Security fix for CVE-2017-16248. Catalyst::Plugin::Static::Simple has been changed to not serve static files with dots in the names (i.e. .svn, .git, ...) [ 1 ] Bug #1509181 - CVE-2017-16248 perl-Catalyst-Plugin-Static-Simple: Invalid access control https://bugzilla.redhat.com/show_bug.cgi?id=1509181 su -c 'dnf upgrade perl-Catalyst-Plugin-Static-Simple' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Change Log

References

Update Instructions

Severity
Product : Fedora 25
Version : 0.34
Release : 1.fc25
URL : https://metacpan.org/dist/Catalyst-Plugin-Static-Simple
Summary : Make serving static pages painless

Related News