Fedora alert FEDORA-2013-13332 (xmonad)

From:
    	     
 
updates@fedoraproject.org 
To:
    	     
 
package-announce@lists.fedoraproject.org 
Subject:
    	     
 
[SECURITY] Fedora 19 Update: xmonad-0.11-4.fc19 
Date:
    	     
 
Tue, 06 Aug 2013 00:26:01 +0000
Message-ID:
    	     
 
<20130806002601.00DBA21B1C@bastion01.phx2.fedoraproject.org>
Archive-link:
    	     
 
Article, Thread
              
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-13332
2013-07-21 22:55:00
--------------------------------------------------------------------------------

Name        : xmonad
Product     : Fedora 19
Version     : 0.11
Release     : 4.fc19
URL         : http://hackage.haskell.org/package/xmonad
Summary     : A tiling window manager
Description :
xmonad is a tiling window manager for X. Windows are arranged
automatically to tile the screen without gaps or overlap, maximising
screen use. All features of the window manager are accessible from
the keyboard: a mouse is strictly optional. xmonad is written and
extensible in Haskell. Custom layout algorithms, and other
extensions, may be written by the user in config files. Layouts are
applied dynamically, and different layouts may be used on each
workspace. Xinerama is fully supported, allowing windows to be tiled
on several screens.

This is a meta-package that installs xmonad-basic and ghc-xmonad-contrib-devel,
allowing xmonad to be customized with "~/.xmonad/xmonad.hs".

To use xmonad with GNOME/MATE, please install xmonad-mate.

--------------------------------------------------------------------------------
Update Information:

- xmonad-contrib-0.11.2 fixes a vulnerability in the DynamicLog module
- update X11 to 1.6.1.1
- update xmobar to 0.18
--------------------------------------------------------------------------------
ChangeLog:

* Fri Mar 22 2013 Jens Petersen <petersen@redhat.com> - 0.11-4
- rebuild
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #989670 - CVE-2013-1436 XMonad.Hooks.DynamicLog remote command injection flaw
        https://bugzilla.redhat.com/show_bug.cgi?id=989670
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update xmonad' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-...