Fedora alert FEDORA-2014-1955 (tpp)
| From: | updates@fedoraproject.org | |
| To: | package-announce@lists.fedoraproject.org | |
| Subject: | [SECURITY] Fedora 19 Update: tpp-1.3.1-17.fc19 | |
| Date: | Tue, 11 Feb 2014 23:06:31 +0000 | |
| Message-ID: | <20140211230631.94E73222BC@bastion01.phx2.fedoraproject.org> |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2014-1955 2014-02-03 01:07:58 -------------------------------------------------------------------------------- Name : tpp Product : Fedora 19 Version : 1.3.1 Release : 17.fc19 URL : http://www.ngolde.de/tpp.html Summary : A ncurses-based presentation tool Description : tpp stands for text presentation program and is a ncurses-based presentation tool. The presentation can be written with your favorite editor in a simple description format and then shown on any text terminal that is supported by ncurses - ranging from an old VT100 to the Linux framebuffer to an xterm. -------------------------------------------------------------------------------- Update Information: 977368: apply Adam Miller's patch correctly. (jesusr@redhat.com) 976686, 976687: Don't execute commands with --exec by default (abe@debian.org) -------------------------------------------------------------------------------- ChangeLog: * Fri Jan 31 2014 jesus m. rodriguez <jesusr@redhat.com> 1.3.1-17 - 977368: apply Adam Miller's patch correctly. (jesusr@redhat.com) - Remove dep on vim-filesystem for EPEL6, subpackage doesn't exist for EL6 (maxamillion@fedoraproject.org) - Fix ruby macros for EPEL6 (maxamillion@fedoraproject.org) * Sat Jan 18 2014 jesus m. rodriguez <jmrodri@gmail.com> 1.3.1-16 - 976686, 976687: add exec patch to spec file (jmrodri@gmail.com) - 976686, 976687: Don't execute commands with --exec by default (abe@debian.org) * Wed Jan 15 2014 jesus m. rodriguez <jmrodri@gmail.com> 1.3.1-15 - patch to make it work (jmrodri@gmail.com) * Wed Jan 15 2014 jesus m. rodriguez <jesusr@redhat.com> 1.3.1-14 - 977368: remove invalid vim-filesystem dependency (maxamillion@fedoraproject.org) * Sun Aug 4 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.1-13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #977368 - tpp has invalid dependency on epel6 https://bugzilla.redhat.com/show_bug.cgi?id=977368 [ 2 ] Bug #976686 - CVE-2013-2208 tpp: Possibility of arbitrary code execution when processing untrusted TPP template [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=976686 [ 3 ] Bug #976687 - CVE-2013-2208 tpp: Possibility of arbitrary code execution when processing untrusted TPP template [epel-6] https://bugzilla.redhat.com/show_bug.cgi?id=976687 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update tpp' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-...