[SECURITY] Fedora 8 Update: glib2-2.14.6-1.fc8

updates at fedoraproject.org updates at fedoraproject.org
Wed Feb 13 05:02:14 UTC 2008


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-1533
2008-02-13 04:18:08
--------------------------------------------------------------------------------

Name        : glib2
Product     : Fedora 8
Version     : 2.14.6
Release     : 1.fc8
URL         : http://www.gtk.org
Summary     : A library of handy utility functions
Description :
GLib is the low-level core library that forms the basis
for projects such as GTK+ and GNOME. It provides data structure
handling for C, portability wrappers, and interfaces for such runtime
functionality as an event loop, threads, dynamic loading, and an
object system.

This package provides version 2 of GLib.

--------------------------------------------------------------------------------
Update Information:

PCRE 7.6 fixed following bug:    A character class containing a very large
number of characters   with codepoints greater than 255 (in UTF-8 mode, of
course) caused a buffer overflow.    The GLib release 2.14.6 updates the
included copy of PCRE to version 7.6.
--------------------------------------------------------------------------------
ChangeLog:

* Thu Feb  7 2008 Matthias Clasen <mclasen at redhat.com> - 2.14.6-1
- Update to 2.14.6 (fixes a buffer overflow in PCRE)
* Mon Jan  7 2008 Matthias Clasen <mclasen at redhat.com> - 2.14.5-1
- Update to 2.14.5
* Sat Nov 24 2007 Matthias Clasen <mclasen at redhat.com> - 2.14.4-1
- Update to 2.14.4
* Wed Nov  7 2007 Matthias Clasen <mclasen at redhat.com> - 2.14.3-1
- Update to 2.14.3, including a new version of PCRE that
  fixes several vulnerabilities
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #431660 - pcre: buffer overflow via large UTF-8 character class
        https://bugzilla.redhat.com/show_bug.cgi?id=431660
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update glib2' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------




More information about the package-announce mailing list