[SECURITY] Fedora 13 Update: libmikmod-3.2.0-11.beta2.fc13

updates at fedoraproject.org updates at fedoraproject.org
Thu Sep 9 01:12:11 UTC 2010


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-13702
2010-08-30 17:44:01
--------------------------------------------------------------------------------

Name        : libmikmod
Product     : Fedora 13
Version     : 3.2.0
Release     : 11.beta2.fc13
URL         : http://mikmod.raphnet.net/
Summary     : A MOD music file player library
Description :
libmikmod is a library used by the mikmod MOD music file player for
UNIX-like systems. Supported file formats include MOD, STM, S3M, MTM,
XM, ULT and IT.

--------------------------------------------------------------------------------
Update Information:

Fixes CVE-2009-3995 and CVE-2009-3996.
--------------------------------------------------------------------------------
ChangeLog:

* Fri Aug 20 2010 Jindrich Novy <jnovy at redhat.com> 3.2.0-11.beta2
- update the CVE-2009-3995,3996 patch and fix its naming
* Thu Jul 15 2010 Jindrich Novy <jnovy at redhat.com> 3.2.0-10.beta2
- fix CVE-2009-3995,3996 (#614643)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #614643 - CVE-2009-3995 CVE-2009-3996 libmikmod: arbitrary code execution via crafted Impulse Tracker or Ultratracker files
        https://bugzilla.redhat.com/show_bug.cgi?id=614643
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update libmikmod' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


More information about the package-announce mailing list