The following builds have been pushed to Fedora EPEL 4 updates-testing
Django-1.1.1-1.el4
python-guppy-0.1.9-1.el4
tcl-mysqltcl-3.05-6.el4
Details about builds:
================================================================================
Django-1.1.1-1.el4 (FEDORA-EPEL-2009-0617)
A high-level Python Web framework
--------------------------------------------------------------------------------
Update Information:
http://www.djangoproject.com/weblog/2009/oct/09/security/ Description of
vulnerability ============================ Django's forms library included
field types which perform regular-expression-based validation of email addresses
and URLs. Certain addresses/URLs could trigger a pathological performance case
in this regular expression, resulting in the server process/thread becoming
unresponsive, and consuming excessive CPU over an extended period of time. If
deliberately triggered, this could result in an effective denial-of-service
attack.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 9 2009 Steve 'Ashcrow' Milner <stevem(a)gnulinux.net> - 1.1.1-1
- Update to fix
http://www.djangoproject.com/weblog/2009/oct/09/security/
- Django-ignore-pyo-bz-495046.patch no longer needed.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #528246 - Django's forms DOS in 1.1/1.0
https://bugzilla.redhat.com/show_bug.cgi?id=528246
--------------------------------------------------------------------------------
================================================================================
python-guppy-0.1.9-1.el4 (FEDORA-EPEL-2009-0624)
A Python Programming Environment
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #526238 - Review Request: python-guppy - A Python Programming Environment
https://bugzilla.redhat.com/show_bug.cgi?id=526238
--------------------------------------------------------------------------------
================================================================================
tcl-mysqltcl-3.05-6.el4 (FEDORA-EPEL-2009-0618)
MySQL interface for Tcl
--------------------------------------------------------------------------------
Update Information:
New package: tcl-mysqltcl - MySQL interface for Tcl This package is an
extension to the Tool Command Language (Tcl) that provides high-level access to
a MySQL database server.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #466047 - Review Request: tcl-mysqltcl - MySQL interface for Tcl
https://bugzilla.redhat.com/show_bug.cgi?id=466047
--------------------------------------------------------------------------------