Fedora alert FEDORA-2010-15120 (bzip2)

From:
    	     
 
updates@fedoraproject.org 
To:
    	     
 
package-announce@lists.fedoraproject.org 
Subject:
    	     
 
[SECURITY] Fedora 13 Update: bzip2-1.0.6-1.fc13 
Date:
    	     
 
Fri, 24 Sep 2010 20:34:35 +0000
Message-ID:
    	     
 
<20100924203435.328761107D7@bastion02.phx2.fedoraproject.org>
Archive-link:
    	     
 
Article, Thread
              
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-15120
2010-09-23 04:24:15
--------------------------------------------------------------------------------

Name        : bzip2
Product     : Fedora 13
Version     : 1.0.6
Release     : 1.fc13
URL         : http://www.bzip.org/
Summary     : A file compression utility
Description :
Bzip2 is a freely available, patent-free, high quality data compressor.
Bzip2 compresses files to within 10 to 15 percent of the capabilities
of the best techniques available.  However, bzip2 has the added benefit
of being approximately two times faster at compression and six times
faster at decompression than those techniques.  Bzip2 is not the
fastest compression utility, but it does strike a balance between speed
and compression capability.

Install bzip2 if you need a compression utility.

--------------------------------------------------------------------------------
ChangeLog:

* Wed Sep 22 2010 Ivana Hutarova Varekova <varekova@redhat.com> - 1.0.6-1
- update to 1.0.6
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #627882 - CVE-2010-0405 bzip2: integer overflow flaw in BZ2_decompress
        https://bugzilla.redhat.com/show_bug.cgi?id=627882
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update bzip2' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-...