--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-7512
2008-09-05 10:48:46
--------------------------------------------------------------------------------

Name        : xine-lib
Product     : Fedora 9
Version     : 1.1.15
Release     : 1.fc9
URL         : http://xinehq.de/
Summary     : Xine library
Description :
This package contains the Xine library. Xine is a free multimedia player.
It can play back various media. It also decodes multimedia files from local
disk drives, and displays multimedia streamed over the Internet. It
interprets many of the most common multimedia formats available - and some
of the most uncommon formats, too.  --with/--without rpmbuild options
(some default values depend on target distribution): aalib, caca, directfb,
imagemagick, freetype, antialiasing (with freetype), pulseaudio, xcb.

--------------------------------------------------------------------------------
Update Information:

This release fixes multiple bugs and security issues:  - DoS via corrupted Ogg
files (CVE-2008-3231)  - multiple possible buffer overflows detailed in
oCERT-2008-008    For more details, see:
;group_id=9655
http://ocert.org/advisories/ocert-2008-008.html    NOTE: A coordinated
release with 3rd-party repos was not possible, so this update may result in
dependency issues with currently-installed xine-lib-extras-* rpms.  This
temporary problem will be rectified asap.
--------------------------------------------------------------------------------
ChangeLog:

* Wed Aug 20 2008 Rex Dieter  - 1.1.15-1
- xine-lib-1.1.15, plugin ABI 1.24 (rh#455752, CVE-2008-3231)
- Obsoletes: -arts (f9+)
* Sun Apr 27 2008 Kevin Kofler  - 1.1.12-3
- rebuild for new ImageMagick (6.4.0.10)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #456057 - CVE-2008-3231 xine-lib: crash on zzuf test case lol-ffplay.ogg
        https://bugzilla.redhat.com/show_bug.cgi?id=456057
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update xine-lib' at the command line.
For more information, refer to "Managing Software with yum",
available at .

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/security/
--------------------------------------------------------------------------------

_______________________________________________
Fedora-package-announce mailing list
Fedora-package-announce@redhat.com
http://www.redhat.com/mailman/listinfo/fedora-package-announce