[SECURITY] Fedora 13 Update: gnucash-2.3.15-2.fc13

updates at fedoraproject.org updates at fedoraproject.org
Sat Oct 30 23:48:07 UTC 2010


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-16605
2010-10-22 17:31:48
--------------------------------------------------------------------------------

Name        : gnucash
Product     : Fedora 13
Version     : 2.3.15
Release     : 2.fc13
URL         : http://gnucash.org/
Summary     : Finance management application
Description :
GnuCash is a personal finance manager. A check-book like register GUI
allows you to enter and track bank accounts, stocks, income and even
currency trades. The interface is designed to be simple and easy to
use, but is backed with double-entry accounting principles to ensure
balanced books.

--------------------------------------------------------------------------------
Update Information:

This updates GnuCash to the latest 2.4 development release, and removes an unneeded file that could cause a security issue if ran from a directory that other users had write access to.
--------------------------------------------------------------------------------
ChangeLog:

* Thu Oct 21 2010 Bill Nottingham <notting at redhat.com>
- don't ship gnc-test-env (#644933, CVE-2010-3999)
* Mon Aug 23 2010 Bill Nottingham <notting at redhat.com> - 2.3.15-1
- update to 2.3.15
- include upstream patch for config migration (#571621)
* Tue Jul  6 2010 Bill Nottingham <notting at redhat.com> - 2.3.13-2
- rebuild against newer webkitgtk
* Thu Jun  3 2010 Bill Nottingham <notting at redhat.com> - 2.3.13-1
- update to 2.3.13
* Tue May 18 2010 Bill Nottingham <notting at redhat.com> - 2.3.12-3
- fix finding of dbi drivers (#593090)
* Fri Apr 30 2010 Bill Nottingham <notting at redhat.com> - 2.3.12-2
- update to 2.3.12
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #644933 - CVE-2010-3999 gnucash: insecure library loading vulnerability
        https://bugzilla.redhat.com/show_bug.cgi?id=644933
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update gnucash' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


More information about the package-announce mailing list