-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-9961 2009-09-25 19:43:22 --------------------------------------------------------------------------------
Name : newt Product : Fedora 11 Version : 0.52.10 Release : 4.fc11 URL : https://fedorahosted.org/newt/ Summary : A library for text mode user interfaces Description : Newt is a programming library for color text mode, widget based user interfaces. Newt can be used to add stacked windows, entry widgets, checkboxes, radio buttons, labels, plain text fields, scrollbars, etc., to text mode user interfaces. This package also contains the shared library needed by programs built with newt, as well as a /usr/bin/dialog replacement called whiptail. Newt is based on the slang library. -------------------------------------------------------------------------------- Update Information: Fixes a buffer overflow in textbox, which could be exploited to execute arbitrary code. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 24 2009 Miroslav Lichvar <[email protected]> - 0.52.10-4 - fix buffer overflow in textbox when reflowing (#523955, CVE-2009-2905) -------------------------------------------------------------------------------- References: [ 1 ] Bug #523955 - CVE-2009-2905 newt: heap-overflow in textbox when text reflowing https://bugzilla.redhat.com/show_bug.cgi?id=523955 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update newt' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list [email protected] http://www.redhat.com/mailman/listinfo/fedora-package-announce
