User: Password:
|
|
Subscribe / Log in / New account

Fedora alert FEDORA-2010-16687 (bristol)

From:  updates@fedoraproject.org
To:  package-announce@lists.fedoraproject.org
Subject:  [SECURITY] Fedora 13 Update: bristol-0.40.7-7.fc13
Date:  Sat, 13 Nov 2010 22:06:57 +0000
Message-ID:  <20101113220657.B096110FE54@bastion02.phx2.fedoraproject.org>
Archive-link:  Article, Thread

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2010-16687 2010-10-27 21:15:38 -------------------------------------------------------------------------------- Name : bristol Product : Fedora 13 Version : 0.40.7 Release : 7.fc13 URL : http://bristol.sourceforge.net Summary : Synthesizer emulator Description : Bristol is an emulation package for a number of different 'classic' synthesizers including additive and subtractive and a few organs. The application consists of the engine, which is called bristol, and its own GUI library called brighton that represents all the emulations. -------------------------------------------------------------------------------- Update Information: This update stops altering LD_LIBRARY_PATH for Bristol insecurely at runtime. -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 25 2010 Jon Ciesla <limb@jcomserv.net> - 0.40.7-7 - Fix for CVE-2010-3351, BZ 638376. -------------------------------------------------------------------------------- References: [ 1 ] Bug #638376 - CVE-2010-3351 bristol: insecure library loading vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=638376 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update bristol' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-...


(Log in to post comments)


Copyright © 2017, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds