——————————————————————————–
Fedora Update Notification
FEDORA-2014-1955
2014-02-03 01:07:58
——————————————————————————–

Name : tpp
Product : Fedora 19
Version : 1.3.1
Release : 17.fc19
URL : http://www.ngolde.de/tpp.html
Summary : A ncurses-based presentation tool
Description :
tpp stands for text presentation program and is a ncurses-based presentation
tool. The presentation can be written with your favorite editor in a simple
description format and then shown on any text terminal that is supported by
ncurses – ranging from an old VT100 to the Linux framebuffer to an xterm.

——————————————————————————–
Update Information:

977368: apply Adam Miller’s patch correctly. (jesusr@redhat.com)
976686, 976687: Don’t execute commands with –exec by default (abe@debian.org)
——————————————————————————–
ChangeLog:

* Fri Jan 31 2014 jesus m. rodriguez <jesusr@redhat.com> 1.3.1-17
– 977368: apply Adam Miller’s patch correctly. (jesusr@redhat.com)
– Remove dep on vim-filesystem for EPEL6, subpackage doesn’t exist for EL6 (maxamillion@fedoraproject.org)
– Fix ruby macros for EPEL6 (maxamillion@fedoraproject.org)
* Sat Jan 18 2014 jesus m. rodriguez <jmrodri@gmail.com> 1.3.1-16
– 976686, 976687: add exec patch to spec file (jmrodri@gmail.com)
– 976686, 976687: Don’t execute commands with –exec by default (abe@debian.org)
* Wed Jan 15 2014 jesus m. rodriguez <jmrodri@gmail.com> 1.3.1-15
– patch to make it work (jmrodri@gmail.com)
* Wed Jan 15 2014 jesus m. rodriguez <jesusr@redhat.com> 1.3.1-14
– 977368: remove invalid vim-filesystem dependency (maxamillion@fedoraproject.org)
* Sun Aug 4 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> – 1.3.1-13
– Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
——————————————————————————–
References:

[ 1 ] Bug #977368 – tpp has invalid dependency on epel6
https://bugzilla.redhat.com/show_bug.cgi?id=977368
[ 2 ] Bug #976686 – CVE-2013-2208 tpp: Possibility of arbitrary code execution when processing untrusted TPP template [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=976686
[ 3 ] Bug #976687 – CVE-2013-2208 tpp: Possibility of arbitrary code execution when processing untrusted TPP template [epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=976687
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update tpp’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2014-1935
2014-02-03 01:07:06
——————————————————————————–

Name : tpp
Product : Fedora 20
Version : 1.3.1
Release : 17.fc20
URL : http://www.ngolde.de/tpp.html
Summary : A ncurses-based presentation tool
Description :
tpp stands for text presentation program and is a ncurses-based presentation
tool. The presentation can be written with your favorite editor in a simple
description format and then shown on any text terminal that is supported by
ncurses – ranging from an old VT100 to the Linux framebuffer to an xterm.

——————————————————————————–
Update Information:

977368: apply Adam Miller’s patch correctly. (jesusr@redhat.com)
976686, 976687: Don’t execute commands with –exec by default (abe@debian.org)
——————————————————————————–
ChangeLog:

* Fri Jan 31 2014 jesus m. rodriguez <jesusr@redhat.com> 1.3.1-17
– 977368: apply Adam Miller’s patch correctly. (jesusr@redhat.com)
– Remove dep on vim-filesystem for EPEL6, subpackage doesn’t exist for EL6 (maxamillion@fedoraproject.org)
– Fix ruby macros for EPEL6 (maxamillion@fedoraproject.org)
* Sat Jan 18 2014 jesus m. rodriguez <jmrodri@gmail.com> 1.3.1-16
– 976686, 976687: add exec patch to spec file (jmrodri@gmail.com)
– 976686, 976687: Don’t execute commands with –exec by default (abe@debian.org)
* Wed Jan 15 2014 jesus m. rodriguez <jmrodri@gmail.com> 1.3.1-15
– patch to make it work (jmrodri@gmail.com)
* Wed Jan 15 2014 jesus m. rodriguez <jesusr@redhat.com> 1.3.1-14
– 977368: remove invalid vim-filesystem dependency (maxamillion@fedoraproject.org)
——————————————————————————–
References:

[ 1 ] Bug #977368 – tpp has invalid dependency on epel6
https://bugzilla.redhat.com/show_bug.cgi?id=977368
[ 2 ] Bug #976686 – CVE-2013-2208 tpp: Possibility of arbitrary code execution when processing untrusted TPP template [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=976686
[ 3 ] Bug #976687 – CVE-2013-2208 tpp: Possibility of arbitrary code execution when processing untrusted TPP template [epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=976687
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update tpp’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce