| ||||||||||||||||
|
| ||||||||||||||||
Fedora alert FEDORA-2008-7512 (xine-lib)
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-7512 2008-09-05 10:48:46 -------------------------------------------------------------------------------- Name : xine-lib Product : Fedora 9 Version : 1.1.15 Release : 1.fc9 URL : http://xinehq.de/ Summary : Xine library Description : This package contains the Xine library. Xine is a free multimedia player. It can play back various media. It also decodes multimedia files from local disk drives, and displays multimedia streamed over the Internet. It interprets many of the most common multimedia formats available - and some of the most uncommon formats, too. --with/--without rpmbuild options (some default values depend on target distribution): aalib, caca, directfb, imagemagick, freetype, antialiasing (with freetype), pulseaudio, xcb. -------------------------------------------------------------------------------- Update Information: This release fixes multiple bugs and security issues: - DoS via corrupted Ogg files (CVE-2008-3231) - multiple possible buffer overflows detailed in oCERT-2008-008 For more details, see: http://sourceforge.net/project/shownotes.php?release_id=6... http://www.ocert.org/advisories/ocert-2008-008.html NOTE: A coordinated release with 3rd-party repos was not possible, so this update may result in dependency issues with currently-installed xine-lib-extras-* rpms. This temporary problem will be rectified asap. -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 20 2008 Rex Dieter <rdieter@fedoraproject.org> - 1.1.15-1 - xine-lib-1.1.15, plugin ABI 1.24 (rh#455752, CVE-2008-3231) - Obsoletes: -arts (f9+) * Sun Apr 27 2008 Kevin Kofler <Kevin@tigcc.ticalc.org> - 1.1.12-3 - rebuild for new ImageMagick (6.4.0.10) -------------------------------------------------------------------------------- References: [ 1 ] Bug #456057 - CVE-2008-3231 xine-lib: crash on zzuf test case lol-ffplay.ogg https://bugzilla.redhat.com/show_bug.cgi?id=456057 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update xine-lib' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list Fedora-package-announce@redhat.com http://www.redhat.com/mailman/listinfo/fedora-package-ann... (Log in to post comments)
|
|
|||||||||||||||