Mageia alert MGASA-2012-0340 (libvoikko)

From:
    	     
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
    	     
 
updates-announce@ml.mageia.org 
Subject:
    	     
 
[updates-announce] MGASA-2012-0340: libvoikko-3.2.1-1.mga1 (1/core) 
Date:
    	     
 
Fri, 23 Nov 2012 21:33:05 +0100
Message-ID:
    	     
 
<20121123203305.GA5997@valstar.mageia.org>
Archive-link:
    	     
 
Article, Thread
              
MGASA-2012-0340
Date: 	November 23rd, 2012
Affected releases: 	1


Description:
Updated libvoikko packages fix security vulnerability:

This update provides version 3.2.1, which contains the following fix.

Fix handling of embedded null characters in input strings entered through
the Python interface. The bug could be used to cause denial of service
conditions and possibly other problems. Users of these interfaces are
recommended to upgrade to this release. Applications that use the native
C++ library directly (this includes all well known desktop applications)
are not affected by this bug and no changes to the native library have
been made in this release.


Updated Packages:
lib(64)voikko1-3.2.1-1.mga1
lib(64)voikko-devel-3.2.1-1.mga1
python-libvoikko-3.2.1-1.mga1
voikko-tools-3.2.1-1.mga1


References:
http://lists.fedoraproject.org/pipermail/package-announce...
https://bugs.mageia.org/show_bug.cgi?id=7067
https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-...