[SECURITY] Fedora EPEL 6 Update: tpp-1.3.1-17.el6

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2014-0426
2014-02-02 19:04:44
--------------------------------------------------------------------------------

Name        : tpp
Product     : Fedora EPEL 6
Version     : 1.3.1
Release     : 17.el6
URL         : http://www.ngolde.de/tpp.html
Summary     : A ncurses-based presentation tool
Description :
tpp stands for text presentation program and is a ncurses-based presentation
tool. The presentation can be written with your favorite editor in a simple
description format and then shown on any text terminal that is supported by
ncurses - ranging from an old VT100 to the Linux framebuffer to an xterm.

--------------------------------------------------------------------------------
Update Information:

977368: apply Adam Miller's patch correctly. (jesusr at redhat.com)
976686, 976687: Don't execute commands with --exec by default (abe at debian.org)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #977368 - tpp has invalid dependency on epel6
        https://bugzilla.redhat.com/show_bug.cgi?id=977368
  [ 2 ] Bug #976686 - CVE-2013-2208 tpp: Possibility of arbitrary code execution when processing untrusted TPP template [fedora-all]
        https://bugzilla.redhat.com/show_bug.cgi?id=976686
  [ 3 ] Bug #976687 - CVE-2013-2208 tpp: Possibility of arbitrary code execution when processing untrusted TPP template [epel-6]
        https://bugzilla.redhat.com/show_bug.cgi?id=976687
--------------------------------------------------------------------------------

This update can be installed with the "yum" update programs.  Use
su -c 'yum update tpp' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora EPEL GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------