Fedora alert FEDORA-2010-17720 (libtlen)
| From: | updates@fedoraproject.org | |
| To: | package-announce@lists.fedoraproject.org | |
| Subject: | [SECURITY] Fedora 14 Update: libtlen-0-0.10.20060309.fc14 | |
| Date: | Tue, 23 Nov 2010 21:54:15 +0000 | |
| Message-ID: | <20101123215415.596C8110E3F@bastion02.phx2.fedoraproject.org> | |
| Archive‑link: | Article |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2010-17720 2010-11-15 21:21:24 -------------------------------------------------------------------------------- Name : libtlen Product : Fedora 14 Version : 0 Release : 0.10.20060309.fc14 URL : http://tleenx.sourceforge.net/ Summary : Tlen.pl client library Description : libtlen is a library providing an API for client programs which want to use Tlen.pl, an Instant Messanging protocol based on Jabber, but with some modifications. -------------------------------------------------------------------------------- Update Information: This update unbundles the old copy of expat included in libtlen, fixing CVE-2009-3720 and possibly other vulnerabilities already fixed in system expat. -------------------------------------------------------------------------------- ChangeLog: * Sun Nov 14 2010 Dominik Mierzejewski <rpm@greysector.net> 0-0.10.20060309 - fix source URL - unbundle expat (fix bug #652502, CVE-2009-3720) -------------------------------------------------------------------------------- References: [ 1 ] Bug #652502 - libtlen contains an embedded copy of expat, prone to CVE-2009-3720 https://bugzilla.redhat.com/show_bug.cgi?id=652502 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update libtlen' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-...