LWN.net Logo

Fedora alert FEDORA-2008-6025 (glib2)

From:  updates@fedoraproject.org
To:  fedora-package-announce@redhat.com
Subject:  [SECURITY] Fedora 8 Update: glib2-2.14.6-2.fc8
Date:  Thu, 03 Jul 2008 03:14:39 +0000
Message-ID:  <200807030314.m633EQQf018258@bastion.fedora.phx.redhat.com>

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-6025 2008-07-03 00:41:54 -------------------------------------------------------------------------------- Name : glib2 Product : Fedora 8 Version : 2.14.6 Release : 2.fc8 URL : http://www.gtk.org Summary : A library of handy utility functions Description : GLib is the low-level core library that forms the basis for projects such as GTK+ and GNOME. It provides data structure handling for C, portability wrappers, and interfaces for such runtime functionality as an event loop, threads, dynamic loading, and an object system. This package provides version 2 of GLib. -------------------------------------------------------------------------------- Update Information: This update fixes a heap-based overflow caused by incorrect option handling in pcre (CVE-2008-2371) -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 2 2008 Matthias Clasen <mclasen@redhat.com> - 2.14.6-2 - Fix a heap-based buffer overflow in PCRE (CVE-2008-2371) * Thu Feb 7 2008 Matthias Clasen <mclasen@redhat.com> - 2.14.6-1 - Update to 2.14.6 (fixes a buffer overflow in PCRE) * Mon Jan 7 2008 Matthias Clasen <mclasen@redhat.com> - 2.14.5-1 - Update to 2.14.5 * Sat Nov 24 2007 Matthias Clasen <mclasen@redhat.com> - 2.14.4-1 - Update to 2.14.4 * Wed Nov 7 2007 Matthias Clasen <mclasen@redhat.com> - 2.14.3-1 - Update to 2.14.3, including a new version of PCRE that fixes several vulnerabilities -------------------------------------------------------------------------------- References: [ 1 ] Bug #452079 - CVE-2008-2371 pcre: heap overflow caused by incorrect option handling https://bugzilla.redhat.com/show_bug.cgi?id=452079 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update glib2' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list Fedora-package-announce@redhat.com http://www.redhat.com/mailman/listinfo/fedora-package-ann...


(Log in to post comments)

Copyright © 2012, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds