Fedora alert FEDORA-2010-12266 (mapserver)
| From: | updates@fedoraproject.org | |
| To: | package-announce@lists.fedoraproject.org | |
| Subject: | [SECURITY] Fedora 13 Update: mapserver-5.6.5-1.fc13 | |
| Date: | Thu, 26 Aug 2010 01:00:42 +0000 | |
| Message-ID: | <20100826010042.27B6B10FA06@bastion02.phx2.fedoraproject.org> |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2010-12266 2010-08-07 22:46:04 -------------------------------------------------------------------------------- Name : mapserver Product : Fedora 13 Version : 5.6.5 Release : 1.fc13 URL : http://mapserver.gis.umn.edu Summary : Environment for building spatially-enabled internet applications Description : Mapserver is an internet mapping program that converts GIS data to map images in real time. With appropriate interface pages, Mapserver can provide an interactive internet map based on custom GIS data. -------------------------------------------------------------------------------- Update Information: - Update to 5.6.5, for various fixes described at: http://trac.osgeo.org/mapserver/browser/tags/rel-5-6-5/ma... Also fixes CVE-2010-2539, CVE-2010-2540, per bz #617301 and #617312. -------------------------------------------------------------------------------- ChangeLog: * Mon Jul 26 2010 Devrim GÜNDÜZ <devrim@gunduz.org> - 5.6.5-1 - Update to 5.6.5, for various fixes described at: http://trac.osgeo.org/mapserver/browser/tags/rel-5-6-5/ma... Also fixes CVE-2010-2539, CVE-2010-2540, per bz #617301 and #617312. -------------------------------------------------------------------------------- References: [ 1 ] Bug #617312 - CVE-2010-2539 MapServer: Buffer overflow by generating unique temporary filename(s) (Trac#3484) https://bugzilla.redhat.com/show_bug.cgi?id=617312 [ 2 ] Bug #617301 - CVE-2010-2540 MapServer: Disable insecure mapserv CGI command-line debug args (Trac#3485) https://bugzilla.redhat.com/show_bug.cgi?id=617301 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update mapserver' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-...