Sigurnosni nedostaci programskog paketa abcm2ps

Preporuke

by - 21. svibnja 2020.0

Detalji os-a: WN7
Važnost: IMP
Operativni sustavi: L
Kategorije: LFE

——————————————————————————–
Fedora Update Notification
FEDORA-2020-eb7a965fcf
2020-05-21 03:07:56.683407
——————————————————————————–

Name : abcm2ps
Product : Fedora 30
Version : 8.14.7
Release : 2.fc30
URL : http://moinejf.free.fr
Summary : A program to typeset ABC tunes into Postscript
Description :
Abcm2ps is a package which converts music tunes from ABC format to
Postscript. Based on abc2ps version 1.2.5, it was developed mainly to
print Baroque organ scores which have independent voices played on one
or many keyboards and a pedal-board. Abcm2ps introduces many
extensions to the ABC language that make it suitable for classical
music.

——————————————————————————–
Update Information:

New upstream release with fixes for CVEs and other enhancements.
——————————————————————————–
ChangeLog:

* Tue May 12 2020 Stuart Gathman <stuart@gathman.org> – 8.14.7-2
– Move sample ABC output to subpackage
* Tue May 12 2020 Stuart Gathman <stuart@gathman.org> – 8.14.7-1
– New upstream release
* Wed Apr 29 2020 Filipe Rosset <rosset.filipe@gmail.com> – 7.8.14-11
– Fix FTBFS
* Tue Jan 28 2020 Fedora Release Engineering <releng@fedoraproject.org> – 7.8.14-10
– Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Wed Jul 24 2019 Fedora Release Engineering <releng@fedoraproject.org> – 7.8.14-9
– Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
——————————————————————————–
References:

[ 1 ] Bug #1063718 – abcm2ps-8.14.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1063718
[ 2 ] Bug #1576118 – CVE-2018-10753 abcm2ps: stack based buffer overflow in the delayed_output function in music.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1576118
[ 3 ] Bug #1576641 – CVE-2018-10771 abcm2ps: Stack-based buffer overflow in parse.c:get_key() allows for denial of service [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1576641
[ 4 ] Bug #1799137 – abcm2ps: FTBFS in Fedora rawhide/f32
https://bugzilla.redhat.com/show_bug.cgi?id=1799137
——————————————————————————–

This update can be installed with the “dnf” update program. Use
su -c ‘dnf upgrade –advisory FEDORA-2020-eb7a965fcf’ at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list — package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org

——————————————————————————–
Fedora Update Notification
FEDORA-2020-a820f2b735
2020-05-21 02:51:59.947815
——————————————————————————–

Name : abcm2ps
Product : Fedora 32
Version : 8.14.7
Release : 2.fc32
URL : http://moinejf.free.fr
Summary : A program to typeset ABC tunes into Postscript
Description :
Abcm2ps is a package which converts music tunes from ABC format to
Postscript. Based on abc2ps version 1.2.5, it was developed mainly to
print Baroque organ scores which have independent voices played on one
or many keyboards and a pedal-board. Abcm2ps introduces many
extensions to the ABC language that make it suitable for classical
music.

——————————————————————————–
Update Information:

New upstream release with fixes for CVEs and other enhancements.
——————————————————————————–
ChangeLog:

* Tue May 12 2020 Stuart Gathman <stuart@gathman.org> – 8.14.7-2
– Move sample ABC output to subpackage
* Tue May 12 2020 Stuart Gathman <stuart@gathman.org> – 8.14.7-1
– New upstream release
* Wed Apr 29 2020 Filipe Rosset <rosset.filipe@gmail.com> – 7.8.14-11
– Fix FTBFS
* Tue Jan 28 2020 Fedora Release Engineering <releng@fedoraproject.org> – 7.8.14-10
– Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
——————————————————————————–
References:

This update can be installed with the “dnf” update program. Use
su -c ‘dnf upgrade –advisory FEDORA-2020-a820f2b735’ at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

——————————————————————————–
Fedora Update Notification
FEDORA-2020-7016bb7a0d
2020-05-21 02:50:00.651045
——————————————————————————–

Name : abcm2ps
Product : Fedora 31
Version : 8.14.7
Release : 2.fc31
URL : http://moinejf.free.fr
Summary : A program to typeset ABC tunes into Postscript
Description :
Abcm2ps is a package which converts music tunes from ABC format to
Postscript. Based on abc2ps version 1.2.5, it was developed mainly to
print Baroque organ scores which have independent voices played on one
or many keyboards and a pedal-board. Abcm2ps introduces many
extensions to the ABC language that make it suitable for classical
music.

——————————————————————————–
Update Information:

New upstream release with fixes for CVEs and other enhancements.
——————————————————————————–
ChangeLog:

* Tue May 12 2020 Stuart Gathman <stuart@gathman.org> – 8.14.7-2
– Move sample ABC output to subpackage
* Tue May 12 2020 Stuart Gathman <stuart@gathman.org> – 8.14.7-1
– New upstream release
* Wed Apr 29 2020 Filipe Rosset <rosset.filipe@gmail.com> – 7.8.14-11
– Fix FTBFS
* Tue Jan 28 2020 Fedora Release Engineering <releng@fedoraproject.org> – 7.8.14-10
– Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
——————————————————————————–
References:

This update can be installed with the “dnf” update program. Use
su -c ‘dnf upgrade –advisory FEDORA-2020-7016bb7a0d’ at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Autor	Toni Vugdelija
Cert id	NCERT-REF-2020-05-0001-ADV
Cve	CERT-CVE-DUMMY
ID izvornika	CERT-ORIGID-DUMMY
Proizvod	CERT-DUMMY-PRODUCT
Izvor	Adobe

Sigurnosni nedostaci programskog paketa abcm2ps

Archives

More in Preporuke

Sigurnosni nedostatak programskog paketa oddjob