[SECURITY] Fedora 13 Update: gnome-subtitles-1.0-3.fc13

updates at fedoraproject.org updates at fedoraproject.org
Thu Oct 14 06:35:08 UTC 2010


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-15711
2010-10-05 08:57:49
--------------------------------------------------------------------------------

Name        : gnome-subtitles
Product     : Fedora 13
Version     : 1.0
Release     : 3.fc13
URL         : http://gnome-subtitles.sourceforge.net
Summary     : Subtitle editor for Gnome
Description :
Gnome Subtitles is a subtitle editor for the GNOME desktop. It supports the
most common text-based subtitle formats and allows for subtitle editing,
translation and synchronization.

--------------------------------------------------------------------------------
Update Information:

Fix a security vulnerability in LD_LIBRARY_PATH handling.
--------------------------------------------------------------------------------
ChangeLog:

* Sun Oct  3 2010 Julian Sikorski <belegdol at fedoraproject.org> - 1.0-3
- Switched to upstreams approach for the security fix
- Use the new macros properly
* Thu Sep 30 2010 Julian Sikorski <belegdol at fedoraproject.org> - 1.0-2
- Fixed security vulnrerability CVE-2010-3357
- Updated scriptlets to the latest spec
- Dropped scrollkeeper BR
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #638384 - CVE-2010-3357 gnome-subtitles: insecure library loading vulnerability
        https://bugzilla.redhat.com/show_bug.cgi?id=638384
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update gnome-subtitles' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


More information about the package-announce mailing list