You are here
Home > Preporuke > Sigurnosni nedostatak programskog paketa chicken

Sigurnosni nedostatak programskog paketa chicken

  • Detalji os-a: WN7
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LFE

——————————————————————————–
Fedora Update Notification
FEDORA-2013-22130
2013-11-26 03:06:48
——————————————————————————–

Name : chicken
Product : Fedora 20
Version : 4.8.0.5
Release : 1.fc20
URL : http://call-cc.org
Summary : A practical and portable Scheme system
Description :
CHICKEN is a compiler for the Scheme programming language.
CHICKEN produces portable, efficient C, supports almost all of the R5RS
Scheme language standard, and includes many enhancements and extensions.

——————————————————————————–
Update Information:

Latest upstream release.
Upstream patch for CVE-2013-4385.
——————————————————————————–
ChangeLog:

* Sun Nov 24 2013 Ricky Elrod <codeblock@fedoraproject.org> – 4.8.0.5-1
– Upstream 4.8.0.5.
* Fri Sep 27 2013 Ricky Elrod <codeblock@fedoraproject.org> – 4.8.0.4-4
– Add upstream patch for CVE-2013-4385, until 4.8.0.5 is released.
http://code.call-cc.org/cgi-bin/gitweb.cgi?p=chicken-core.git;a=commitdiff;h=cd1b9775005ebe220ba11265dbf5396142e65f26
——————————————————————————–
References:

[ 1 ] Bug #1012974 – CVE-2013-4385 chicken: buffer overrun
https://bugzilla.redhat.com/show_bug.cgi?id=1012974
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update chicken’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

AutorMarko Stanec
Cert idNCERT-REF-2014-02-0012-ADV
CveCERT-CVE-DUMMY
ID izvornikaCERT-ORIGID-DUMMY
ProizvodCERT-DUMMY-PRODUCT
Izvorhttp://www.adobe.com/
Top
More in Preporuke
Sigurnosni nedostatak programskog paketa ikiwiki

Otkriven je sigurnosni nedostatak u programskom paketu ikiwiki za operacijski sustav Fedora. Otkriveni nedostatak potencijalnim napadačima omogućuje umetanje proizvoljnog javascript...

Close