Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Fedora 9: 2009-8321 High: Gnome Terminal Buffer Overflow Vulnerability

fedora
Calendar Grey September 10, 2008
Dist Fedora Esm H88
This patch addresses a formatting bug in yelp version 2.20, improving the security of Fedora 8. Ensure you remain protected and up to date!
This update fixes a format string vulnerability that was discovered in yelp 2.20.

Summary

Yelp is the Gnome 2 help/documentation browser. It is designed

to help you browse all the documentation on your system in

one central tool.

Update Information:

This update fixes a format string vulnerability that was discovered in yelp 2.20.

Change Log

* Mon Aug 25 2008 Matthew Barnes - 2.20.0-12 - Add patch for RH bug #459487 (format string vulnerability). * Tue Jul 15 2008 Christopher Aillon - 2.20.0-11 - Rebuild against newer gecko * Wed Jul 2 2008 Christopher Aillon - 2.20.0-10 - Rebuild against newer gecko * Wed Apr 16 2008 Christopher Aillon - 2.20.0-9 - Rebuild against newer gecko * Tue Mar 25 2008 Christopher Aillon - 2.20.0-8 - Rebuild against newer gecko * Fri Feb 8 2008 Christopher Aillon - 2.20.0-7 - Rebuild against newer gecko * Tue Nov 27 2007 Christopher Aillon - 2.20.0-6 - Rebuild against newer gecko * Mon Nov 5 2007 Matthias Clasen - 2.20.0-5 - Fix a crash in search (#361041) * Mon Nov 5 2007 Martin Stransky - 2.20.0-4 - Rebuild against new firefox * Sun Nov 4 2007 Matthias Clasen - 2.20.0-3 - Fix a crash when loading the rarian docs

References


[ 1 ] Bug #459487 - CVE-2008-3533 yelp: Invalid URI format string vulnerability (remote arbitrary code execution) https://bugzilla.redhat.com/show_bug.cgi?id=459487

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update yelp' at the command line. For more information, refer to "Managing Software with yum", available at .

Name: yelp
Product: Fedora 8
Version: 2.20.0
Release: 12.fc8
URL:
Summary: A system documentation reader from the Gnome project

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here