LWN.net Logo

Fedora alert FEDORA-2009-9957 (newt)

From:  updates@fedoraproject.org
To:  fedora-package-announce@redhat.com
Subject:  [SECURITY] Fedora 10 Update: newt-0.52.10-2.fc10
Date:  Fri, 25 Sep 2009 20:14:51 +0000
Message-ID:  <20090925201451.7A8A610F8A3@bastion2.fedora.phx.redhat.com>
Archive-link:  Article, Thread

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-9957 2009-09-25 19:43:14 -------------------------------------------------------------------------------- Name : newt Product : Fedora 10 Version : 0.52.10 Release : 2.fc10 URL : https://fedorahosted.org/newt/ Summary : A library for text mode user interfaces Description : Newt is a programming library for color text mode, widget based user interfaces. Newt can be used to add stacked windows, entry widgets, checkboxes, radio buttons, labels, plain text fields, scrollbars, etc., to text mode user interfaces. This package also contains the shared library needed by programs built with newt, as well as a /usr/bin/dialog replacement called whiptail. Newt is based on the slang library. -------------------------------------------------------------------------------- Update Information: Fixes a buffer overflow in textbox, which could be exploited to execute arbitrary code. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 24 2009 Miroslav Lichvar <mlichvar@redhat.com> - 0.52.10-2 - fix buffer overflow in textbox when reflowing (#523955, CVE-2009-2905) -------------------------------------------------------------------------------- References: [ 1 ] Bug #523955 - CVE-2009-2905 newt: heap-overflow in textbox when text reflowing https://bugzilla.redhat.com/show_bug.cgi?id=523955 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update newt' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list Fedora-package-announce@redhat.com http://www.redhat.com/mailman/listinfo/fedora-package-ann...


(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds