[SECURITY] Fedora 19 Update: mumble-1.2.6-1.fc19

updates at fedoraproject.org updates at fedoraproject.org
Wed May 28 02:55:34 UTC 2014


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-6470
2014-05-18 22:13:38
--------------------------------------------------------------------------------

Name        : mumble
Product     : Fedora 19
Version     : 1.2.6
Release     : 1.fc19
URL         : http://mumble.sourceforge.net/
Summary     : Voice chat suite aimed at gamers
Description :
Mumble provides low-latency, high-quality voice communication for gamers.
It includes game linking, so voice from other players comes
from the direction of their characters, and has echo
cancellation so that the sound from your loudspeakers
won't be audible to other players.

--------------------------------------------------------------------------------
Update Information:

New upstream release 1.2.6.

This update fixes:

* CVE-2014-3755
* CVE-2014-3756
--------------------------------------------------------------------------------
ChangeLog:

* Sat May 17 2014 Christian Krause <chkr at fedoraproject.org> - 1.2.6-1
- Update 1.2.6
- Update fixes CVE-2014-3755 (BZ 1098231) and CVE-2014-3756 (BZ 1098233)
* Fri Apr 25 2014 Christian Krause <chkr at fedoraproject.org> - 1.2.5-1
- Update 1.2.5 (BZ 1062209)
- Update fixes CVE-2014-0044 (BZ 1061857) and CVE-2014-0045 (BZ 1061858)
* Tue Aug 27 2013 Christian Krause <chkr at fedoraproject.org> - 1.2.4-1
- Update 1.2.4 (BZ 976001)
- New systemd-rpm macros (BZ 850218)
- Cleanup
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1098231 - CVE-2014-3755 mumble: Mumble-SA-2014-005 - SVG images with local file references could trigger client DoS
        https://bugzilla.redhat.com/show_bug.cgi?id=1098231
  [ 2 ] Bug #1098233 - CVE-2014-3756 mumble: Mumble-SA-2014-006 - DoS (hang and/or resource exhaustion) on a Mumble client by causing it to load external files via the HTML
        https://bugzilla.redhat.com/show_bug.cgi?id=1098233
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use
su -c 'yum update mumble' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


More information about the package-announce mailing list