-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2013-9146 2013-05-25 11:20:42 --------------------------------------------------------------------------------
Name : libXt Product : Fedora 18 Version : 1.1.3 Release : 4.20130524git1f4802b74.fc18 URL : http://www.x.org Summary : X.Org X11 libXt runtime library Description : X.Org X11 libXt runtime library -------------------------------------------------------------------------------- Update Information: Update to latest git to fix the following CVEs: CVE-2013-2002, CVE-2013-2005 -------------------------------------------------------------------------------- ChangeLog: * Fri May 24 2013 Peter Hutterer <[email protected]> 1.1.3-4.20130524git1f4802b74 - Update to git snapshot to fix CVEs listed below: - CVE-2013-2002 - CVE-2013-2005 * Thu Mar 7 2013 Peter Hutterer <[email protected]> - 1.1.3-3 - autoreconf for aarch64 * Thu Feb 14 2013 Fedora Release Engineering <[email protected]> - 1.1.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #959108 - CVE-2013-2005 libXt: Memory corruption due to unchecked use of unchecked function pointers https://bugzilla.redhat.com/show_bug.cgi?id=959108 [ 2 ] Bug #960352 - CVE-2013-2002 libXt: Array Index error leading to heap-based OOB write https://bugzilla.redhat.com/show_bug.cgi?id=960352 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update libXt' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list [email protected] https://admin.fedoraproject.org/mailman/listinfo/package-announce
