-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2014-6472 2014-05-18 22:13:43 --------------------------------------------------------------------------------
Name : mumble Product : Fedora 20 Version : 1.2.6 Release : 1.fc20 URL : http://mumble.sourceforge.net/ Summary : Voice chat suite aimed at gamers Description : Mumble provides low-latency, high-quality voice communication for gamers. It includes game linking, so voice from other players comes from the direction of their characters, and has echo cancellation so that the sound from your loudspeakers won't be audible to other players. -------------------------------------------------------------------------------- Update Information: New upstream release 1.2.6. This update fixes: * CVE-2014-3755 * CVE-2014-3756 -------------------------------------------------------------------------------- ChangeLog: * Sat May 17 2014 Christian Krause <[email protected]> - 1.2.6-1 - Update 1.2.6 - Update fixes CVE-2014-3755 (BZ 1098231) and CVE-2014-3756 (BZ 1098233) * Fri Apr 25 2014 Christian Krause <[email protected]> - 1.2.5-1 - Update 1.2.5 (BZ 1062209) - Update fixes CVE-2014-0044 (BZ 1061857) and CVE-2014-0045 (BZ 1061858) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1098231 - CVE-2014-3755 mumble: Mumble-SA-2014-005 - SVG images with local file references could trigger client DoS https://bugzilla.redhat.com/show_bug.cgi?id=1098231 [ 2 ] Bug #1098233 - CVE-2014-3756 mumble: Mumble-SA-2014-006 - DoS (hang and/or resource exhaustion) on a Mumble client by causing it to load external files via the HTML https://bugzilla.redhat.com/show_bug.cgi?id=1098233 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update mumble' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list [email protected] https://admin.fedoraproject.org/mailman/listinfo/package-announce
