[SECURITY] Fedora 16 Update: rubygem-mail-2.4.4-1.fc16

updates at fedoraproject.org updates at fedoraproject.org
Sat May 19 06:58:39 UTC 2012


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-7535
2012-05-10 03:36:52
--------------------------------------------------------------------------------

Name        : rubygem-mail
Product     : Fedora 16
Version     : 2.4.4
Release     : 1.fc16
URL         : http://github.com/mikel/mail
Summary     : Mail provides a nice Ruby DSL for making, sending and reading emails
Description :
A really Ruby Mail handler.

--------------------------------------------------------------------------------
Update Information:

Update to Mail 2.4.4.
--------------------------------------------------------------------------------
ChangeLog:

* Wed May  9 2012 Vít Ondruch <vondruch at redhat.com> - 2.4.4-1
- Update to Mail 2.4.4.
* Tue Jan 31 2012 Vít Ondruch <vondruch at redhat.com> - 2.3.0-3
- Rebuilt for Ruby 1.9.3.
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 2.3.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #816352 - CVE-2012-2139 CVE-2012-2140 rubygem-mail: arbitrary command execution when using exim or sendmail from commandline, file system traversal flaw
        https://bugzilla.redhat.com/show_bug.cgi?id=816352
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update rubygem-mail' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


More information about the package-announce mailing list