Sigurnosni nedostatak programskog paketa python-setuptools

——————————————————————————–
Fedora Update Notification
FEDORA-2013-23140
2013-12-11 01:13:36
——————————————————————————–

Name : python-setuptools
Product : Fedora 18
Version : 0.6.49
Release : 1.fc18
URL : http://pypi.python.org/pypi/distribute
Summary : Easily build and distribute Python packages
Description :
Setuptools is a collection of enhancements to the Python distutils that allow
you to more easily build and distribute Python packages, especially ones that
have dependencies on other packages.

This package contains the runtime components of setuptools, necessary to
execute the software that requires pkg_resources.py.

This package contains the distribute fork of setuptools.

——————————————————————————–
Update Information:

Fix for CVE-2013-2215: Weak integrity checks when loading resources extracted from zipped eggs
——————————————————————————–
ChangeLog:

* Mon Dec 9 2013 Toshio Kuratomi <toshio@fedoraproject.org> – 0.6.49-1
– Upstream update to fix CVE-2013-2215
* Thu Apr 11 2013 Toshio Kuratomi <toshio@fedoraproject.org> – 0.6.36-1
– Update to upstream 0.6.36. Many bugfixes
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> – 0.6.28-4
– Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
——————————————————————————–
References:

[ 1 ] Bug #961332 – python-setuptools: Weak integrity checks when loading resources extracted from zipped eggs
https://bugzilla.redhat.com/show_bug.cgi?id=961332
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update python-setuptools’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2013-23141
2013-12-11 01:13:38
——————————————————————————–

Name : python-setuptools
Product : Fedora 19
Version : 0.6.49
Release : 1.fc19
URL : http://pypi.python.org/pypi/distribute
Summary : Easily build and distribute Python packages
Description :
Setuptools is a collection of enhancements to the Python distutils that allow
you to more easily build and distribute Python packages, especially ones that
have dependencies on other packages.

This package contains the runtime components of setuptools, necessary to
execute the software that requires pkg_resources.py.

This package contains the distribute fork of setuptools.

——————————————————————————–
Update Information:

Fix for CVE-2013-2215: Weak integrity checks when loading resources extracted from zipped eggs
——————————————————————————–
ChangeLog:

* Mon Dec 9 2013 Toshio Kuratomi <toshio@fedoraproject.org> – 0.6.49-1
– Upstream update to fix CVE-2013-2215
——————————————————————————–
References: