[SECURITY] Fedora 19 Update: tpp-1.3.1-17.fc19

updates at fedoraproject.org updates at fedoraproject.org
Tue Feb 11 23:06:31 UTC 2014


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-1955
2014-02-03 01:07:58
--------------------------------------------------------------------------------

Name        : tpp
Product     : Fedora 19
Version     : 1.3.1
Release     : 17.fc19
URL         : http://www.ngolde.de/tpp.html
Summary     : A ncurses-based presentation tool
Description :
tpp stands for text presentation program and is a ncurses-based presentation
tool. The presentation can be written with your favorite editor in a simple
description format and then shown on any text terminal that is supported by
ncurses - ranging from an old VT100 to the Linux framebuffer to an xterm.

--------------------------------------------------------------------------------
Update Information:

977368: apply Adam Miller's patch correctly. (jesusr at redhat.com)
976686, 976687: Don't execute commands with --exec by default (abe at debian.org)
--------------------------------------------------------------------------------
ChangeLog:

* Fri Jan 31 2014 jesus m. rodriguez <jesusr at redhat.com> 1.3.1-17
- 977368: apply Adam Miller's patch correctly. (jesusr at redhat.com)
- Remove dep on vim-filesystem for EPEL6, subpackage doesn't exist for EL6 (maxamillion at fedoraproject.org)
- Fix ruby macros for EPEL6 (maxamillion at fedoraproject.org)
* Sat Jan 18 2014 jesus m. rodriguez <jmrodri at gmail.com> 1.3.1-16
- 976686, 976687: add exec patch to spec file (jmrodri at gmail.com)
- 976686, 976687: Don't execute commands with --exec by default (abe at debian.org)
* Wed Jan 15 2014 jesus m. rodriguez <jmrodri at gmail.com> 1.3.1-15
- patch to make it work (jmrodri at gmail.com)
* Wed Jan 15 2014 jesus m. rodriguez <jesusr at redhat.com> 1.3.1-14
- 977368: remove invalid vim-filesystem dependency (maxamillion at fedoraproject.org)
* Sun Aug  4 2013 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1.3.1-13
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #977368 - tpp has invalid dependency on epel6
        https://bugzilla.redhat.com/show_bug.cgi?id=977368
  [ 2 ] Bug #976686 - CVE-2013-2208 tpp: Possibility of arbitrary code execution when processing untrusted TPP template [fedora-all]
        https://bugzilla.redhat.com/show_bug.cgi?id=976686
  [ 3 ] Bug #976687 - CVE-2013-2208 tpp: Possibility of arbitrary code execution when processing untrusted TPP template [epel-6]
        https://bugzilla.redhat.com/show_bug.cgi?id=976687
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update tpp' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


More information about the package-announce mailing list