Fedora alert FEDORA-2008-10287 (imlib2)
From: | updates@fedoraproject.org | |
To: | fedora-package-announce@redhat.com | |
Subject: | [SECURITY] Fedora 9 Update: imlib2-1.4.2-2.fc9 | |
Date: | Wed, 26 Nov 2008 06:16:53 +0000 | |
Message-ID: | <20081126061653.3B5BD208D98@bastion.fedora.phx.redhat.com> |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-10287 2008-11-26 04:12:09 -------------------------------------------------------------------------------- Name : imlib2 Product : Fedora 9 Version : 1.4.2 Release : 2.fc9 URL : http://docs.enlightenment.org/api/imlib2/html/ Summary : Image loading, saving, rendering, and manipulation library Description : Imlib 2 is a library that does image file loading and saving as well as rendering, manipulation, arbitrary polygon support, etc. It does ALL of these operations FAST. Imlib2 also tries to be highly intelligent about doing them, so writing naive programs can be done easily, without sacrificing speed. This is a complete rewrite over the Imlib 1.x series. The architecture is more modular, simple, and flexible. -------------------------------------------------------------------------------- ChangeLog: * Sun Nov 23 2008 Tomas Smetana <tsmetana@redhat.com> 1.4.2-2 - patch for CVE-2008-5187 * Thu Oct 23 2008 Tomas Smetana <tsmetana@redhat.com> 1.4.2-1 - new upstream version * Fri May 30 2008 Tomas Smetana <tsmetana@redhat.com> 1.4.0-7 - patch for CVE-2008-2426 * Tue Mar 11 2008 Hans de Goede <j.w.r.degoede@hhs.nl> 1.4.0-6 - Disable amd64 assembly optimization. (Kills idesk - #222998, #436924) -------------------------------------------------------------------------------- References: [ 1 ] Bug #472576 - CVE-2008-5187 imilb2 integer overflow https://bugzilla.redhat.com/show_bug.cgi?id=472576 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update imlib2' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list Fedora-package-announce@redhat.com http://www.redhat.com/mailman/listinfo/fedora-package-ann...