Fedora 29 Critical: 2018-d6211abfb0 Gettext Double Free Issue

The GNU gettext package provides a set of tools and documentation for

producing multi-lingual messages in programs. Tools include a set of

conventions about how programs should be written to support message

catalogs, a directory and file naming organization for the message

catalogs, a runtime library which supports the retrieval of translated

messages, and stand-alone programs for handling the translatable and

the already translated strings. Gettext provides an easy to use

library and tools for creating, using, and modifying natural language

catalogs and is a powerful and simple method for internationalizing

programs.

fix CVE-2018-18751 (rhbz#1647044), move gettextize man to correct subpackage

* Thu Nov 8 2018 Pavel Raiskup - 0.19.8.1-18

- fix CVE-2018-18751 (rhbz#1647044)

- put gettextize man page into gettext-devel (man page scan, rhbz#1611303)

[ 1 ] Bug #1647044 - CVE-2018-18751 gettext: double free in default_add_message in read-catalog.c [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1647044

[ 2 ] Bug #1611303 - Man page scan results for gettext

https://bugzilla.redhat.com/show_bug.cgi?id=1611303

su -c 'dnf upgrade --advisory FEDORA-2018-d6211abfb0' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/