--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-c5f71cfa34
2018-10-10 21:14:58.571763
--------------------------------------------------------------------------------

Name        : python-marshmallow
Product     : Fedora EPEL 7
Version     : 2.0.0
Release     : 0.7.gita8b3385.el7
URL         : http://marshmallow.readthedocs.org/
Summary     : Python library for converting complex datatypes to and from 
primitive types
Description :
Marshmallow is a framework-agnostic library for converting complex datatypes,
such as objects, to and from primitive Python datatypes.

Marshmallow schemas can be used to:
* Validate input data.
* Deserialize input data to app-level objects.
* Serialize app-level objects to primitive Python types. The serialized objects
  can then be rendered to standard formats such as JSON for use in an HTTP API.

--------------------------------------------------------------------------------
Update Information:

Security fix for CVE-2018-17175
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1631411 - CVE-2018-17175 python-marshmallow: Information leak due 
to invalid usage of the schema "only" option
        https://bugzilla.redhat.com/show_bug.cgi?id=1631411
--------------------------------------------------------------------------------

This update can be installed with the "yum" update programs.  Use
su -c 'yum update python-marshmallow' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html

All packages are signed with the Fedora EPEL GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
_______________________________________________
epel-package-announce mailing list -- 
epel-package-announce@lists.fedoraproject.org
To unsubscribe send an email to 
epel-package-announce-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/epel-package-announce@lists.fedoraproject.org

Reply via email to