-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2013-11734 2013-06-26 16:45:46 --------------------------------------------------------------------------------
Name : libXv Product : Fedora 19 Version : 1.0.9 Release : 1.fc19 URL : http://www.x.org Summary : X.Org X11 libXv runtime library Description : X.Org X11 libXv runtime library -------------------------------------------------------------------------------- Update Information: Ensure the attribute's name is always null-terminated and points to valid memory. Otherwise, if an integer overflow (CVE-2013-1989) triggers, the returned buffer pointed to uninitialized memory (see https://bugs.freedesktop.org/show_bug.cgi?id=65252). -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 26 2013 Peter Hutterer <[email protected]> 1.0.9-1 - libXv 1.0.9 -------------------------------------------------------------------------------- References: [ 1 ] Bug #959068 - CVE-2013-1989 libXv: Multiple integer overflows leading to heap-based bufer overflows https://bugzilla.redhat.com/show_bug.cgi?id=959068 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update libXv' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list [email protected] https://admin.fedoraproject.org/mailman/listinfo/package-announce
