Fedora 14 : python-feedparser-5.0.1-1.fc14 (2011-4894)

Medium Nessus Plugin ID 53550


The remote Fedora host is missing a security update.


Current release: 5.0.1 - February 20, 2011

- Fix issue 91 (invalid text in XML declaration causes sanitizer to crash)

- Fix issue 254 (sanitization can be bypassed by malformed XML comments)

- Fix issue 255 (sanitizer doesn't strip unsafe URI schemes)

Previous release: 5.0 - January 25, 2011

- Improved MathML support

- Support microformats (rel-tag, rel-enclosure, xfn, hcard)

- Support IRIs

- Allow safe CSS through sanitization

- Allow safe HTML5 through sanitization

- Support SVG

- Support inline XML entity declarations

- Support unescaped quotes and angle brackets in attributes

- Support additional date formats

- Added the request_headers argument to parse()

- Added the response_headers argument to parse()

- Support multiple entry, feed, and source authors

- Officially make Python 2.4 the earliest supported version

- Support Python 3

- Bug fixes, bug fixes, bug fixes

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.


Update the affected python-feedparser package.

See Also



Plugin Details

Severity: Medium

ID: 53550

File Name: fedora_2011-4894.nasl

Version: $Revision: 1.6 $

Type: local

Agent: unix

Published: 2011/04/26

Modified: 2015/10/20

Dependencies: 12634

Risk Information

Risk Factor: Medium


Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Information

CPE: p-cpe:/a:fedoraproject:fedora:python-feedparser, cpe:/o:fedoraproject:fedora:14

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list

Patch Publication Date: 2011/04/06

Reference Information

CVE: CVE-2009-5065, CVE-2011-1156, CVE-2011-1157, CVE-2011-1158

OSVDB: 73563, 73564, 73565, 73566

FEDORA: 2011-4894