Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 28: FEDORA-2018-27f957ae8e High: Terminology Code Execution Threat

fedora
Calendar Grey January 1, 2019
Dist Fedora Esm H88
Important security patch released for Fedora 28's terminology, resolving several CVEs. Follow these steps to apply the update successfully.
Fix CVEs as described in related RHBZ bug.

Summary

Fast and lightweight terminal emulator using EFL libraries.

Fix CVEs as described in related RHBZ bug.

* Sun Dec 23 2018 Conrad Meyer - 1.3.2-1

- Update to latest upstream

- Fix rhbz# 1659977 (CVE)

* Sat Jul 14 2018 Fedora Release Engineering - 1.2.1-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

* Mon May 14 2018 Conrad Meyer - 1.2.1-1

- Update to 1.2.1

- rhbz# 1578178

* Sun Apr 15 2018 Conrad Meyer - 1.2.0-1

- Update to 1.2.0

- Buildsystem has changed to use meson. Adapt, following https://fedoraproject.org/wiki/Packaging:Meson .

[ 1 ] Bug #1659977 - CVE-2018-20167 terminology: Incorrect escaping of crafted files results in code execution [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1659977

su -c 'dnf upgrade --advisory FEDORA-2018-27f957ae8e' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Change Log

References

Update Instructions

Product: Fedora 28
Version: 1.3.2
Release: 1.fc28
URL:
Summary: EFL based terminal emulator

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here