[SECURITY] Fedora 10 Update: gpsdrive-2.09-7.fc10
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-1225
2009-02-05 01:15:56
--------------------------------------------------------------------------------
Name : gpsdrive
Product : Fedora 10
Version : 2.09
Release : 7.fc10
URL : http://www.gpsdrive.de/index.shtml
Summary : A GPS based navigation tool
Description :
Gpsdrive is a map-based navigation system.
It displays your position on a zoomable map
provided from a NMEA-capable GPS receiver. The maps are autoselected
for the best resolution, depending of your position, and the displayed
image can be zoomed. Maps can be downloaded from the Internet with one
mouse click. The program provides information about speed, direction,
bearing, arrival time, actual position, and target position.
Speech output is also available. MySQL is supported.
--------------------------------------------------------------------------------
Update Information:
This update removes several helper scripts: geo-code, geo-nearest, and
gpssmswatch, which have been removed upstream due to security issues. This
update also has a fix for an issue with the splash screen.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 2 2009 Kevin Fenzi <kevin(a)tummy.com> - 2.09-7
- fix for CVE-2008-4959 - bug 470241
- fix for CVE-2008-5380 - bug 475478
- fix for CVE-2008-5703 - bug 481702
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #470241 - CVE-2008-4959 gpsdrive: geo-code insecure temporary file use
https://bugzilla.redhat.com/show_bug.cgi?id=470241
[ 2 ] Bug #475478 - CVE-2008-5380 gpsdrive: Insecure temporary file use in geo-code,
geo-nearest (symlink attack)
https://bugzilla.redhat.com/show_bug.cgi?id=475478
[ 3 ] Bug #481702 - CVE-2008-5703 gpsdrive: insecure temporary file use in gpssmswatch
and splash.c
https://bugzilla.redhat.com/show_bug.cgi?id=481702
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update gpsdrive' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------