[SECURITY] Fedora 18 Update: coreutils-8.17-8.fc18

updates at fedoraproject.org updates at fedoraproject.org
Fri Feb 1 16:28:29 UTC 2013


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-1455
2013-01-25 20:30:14
--------------------------------------------------------------------------------

Name        : coreutils
Product     : Fedora 18
Version     : 8.17
Release     : 8.fc18
URL         : http://www.gnu.org/software/coreutils/
Summary     : A set of basic GNU tools commonly used in shell scripts
Description :
These are the GNU core utilities.  This package is the combination of
the old GNU fileutils, sh-utils, and textutils packages.

--------------------------------------------------------------------------------
Update Information:

- fix multiple segmantation faults in i18n patch (by SUSE) (#869442, #902917)- CVE2013-0223/CVE2013-0221/CVE2013-0222
--------------------------------------------------------------------------------
ChangeLog:

* Thu Jan 24 2013 Ondrej Vasik <ovasik at redhat.com> 8.17-8
- fix multiple segmantation faults in i18n patch (by SUSE)
  (#869442, #902917)- CVE2013-0223/CVE2013-0221/CVE2013-0222
* Tue Dec 11 2012 Ondrej Vasik <ovasik at redhat.com> 8.17-7
- fix showing duplicates in df (#709351, O.Oprala, B.Voelker)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #903464 - CVE-2013-0221 coreutils: segfault in "sort -d" and "sort -M" with long line input
        https://bugzilla.redhat.com/show_bug.cgi?id=903464
  [ 2 ] Bug #903465 - CVE-2013-0222 coreutils: segfault in uniq with long line input
        https://bugzilla.redhat.com/show_bug.cgi?id=903465
  [ 3 ] Bug #903466 - CVE-2013-0223 coreutils: segfault in "join -i" with long line input
        https://bugzilla.redhat.com/show_bug.cgi?id=903466
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update coreutils' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


More information about the package-announce mailing list