| |||||||||||||||||||
Fedora alert FEDORA-2009-2657 (glib2)
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-2657 2009-03-13 18:03:59 -------------------------------------------------------------------------------- Name : glib2 Product : Fedora 10 Version : 2.18.4 Release : 2.fc10 URL : http://www.gtk.org Summary : A library of handy utility functions Description : GLib is the low-level core library that forms the basis for projects such as GTK+ and GNOME. It provides data structure handling for C, portability wrappers, and interfaces for such runtime functionality as an event loop, threads, dynamic loading, and an object system. This package provides version 2 of GLib. -------------------------------------------------------------------------------- Update Information: This update fixes possible integer overflows in the base64 handling code. This has been reported in CVE-2008-4316. -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 12 2009 Matthias Clasen <mclasen@redhat.com> - 2.18.4-2 - Fix integer overflows in the base64 handling functions. CVE-2008-4316 * Fri Jan 9 2009 Matthias Clasen <mclasen@redhat.com> - 2.18.4-1 - Update to 2.18.4 * Mon Nov 24 2008 Matthias Clasen <mclasen@redhat.com> - 2.18.3-2 - Update to 2.18.3 -------------------------------------------------------------------------------- References: [ 1 ] Bug #474770 - CVE-2008-4316 glib2: integer overflows in the base64 handling functions (oCERT-2008-015) https://bugzilla.redhat.com/show_bug.cgi?id=474770 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update glib2' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list Fedora-package-announce@redhat.com http://www.redhat.com/mailman/listinfo/fedora-package-ann... (Log in to post comments)
|
|||||||||||||||||||