[SECURITY] Fedora 9 Update: am-utils-6.1.5-8.1.fc9
updates at fedoraproject.org
updates at fedoraproject.org
Wed Jan 7 09:33:56 UTC 2009
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-10755
2008-12-07 02:14:26
--------------------------------------------------------------------------------
Name : am-utils
Product : Fedora 9
Version : 6.1.5
Release : 8.1.fc9
URL : http://am-utils.org
Summary : Automount utilities including an updated version of Amd.
Description :
Am-utils includes an updated version of Amd, the popular BSD
automounter. An automounter is a program which maintains a cache
of mounted filesystems. Filesystems are mounted when they are
first referenced by the user and unmounted after a certain period of
inactivity. Amd supports a variety of filesystems, including NFS, UFS,
CD-ROMS and local drives.
You should install am-utils if you need a program for automatically
mounting and unmounting filesystems.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 2 2008 Karel Zak <kzak at redhat.com> 5:6.1.5-8.1
- fix #450754 - Amd does not work with 2.6.25 (thanks to Philippe Troin)
- fix #435420 - CVE-2008-1078 am-utils: insecure usage of temporary files
- fix autotools stuff
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #435420 - CVE-2008-1078 am-utils: insecure usage of temporary files
https://bugzilla.redhat.com/show_bug.cgi?id=435420
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update am-utils' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
More information about the package-announce
mailing list