You are here
Home > Preporuke > Sigurnosni nedostaci programskog paketa mumble

Sigurnosni nedostaci programskog paketa mumble

  • Detalji os-a: WN7
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LFE

——————————————————————————–
Fedora Update Notification
FEDORA-2014-5751
2014-04-29 03:22:57
——————————————————————————–

Name : mumble
Product : Fedora 19
Version : 1.2.5
Release : 1.fc19
URL : http://mumble.sourceforge.net/
Summary : Voice chat suite aimed at gamers
Description :
Mumble provides low-latency, high-quality voice communication for gamers.
It includes game linking, so voice from other players comes
from the direction of their characters, and has echo
cancellation so that the sound from your loudspeakers
won’t be audible to other players.

——————————————————————————–
Update Information:

New upstream release 1.2.5.

This update fixes:
* CVE-2014-0044
* CVE-2014-0045

——————————————————————————–
ChangeLog:

* Fri Apr 25 2014 Christian Krause <chkr@fedoraproject.org> – 1.2.5-1
– Update 1.2.5 (BZ 1062209)
– Update fixes CVE-2014-0044 (BZ 1061857) and CVE-2014-0045 (BZ 1061858)
* Tue Aug 27 2013 Christian Krause <chkr@fedoraproject.org> – 1.2.4-1
– Update 1.2.4 (BZ 976001)
– New systemd-rpm macros (BZ 850218)
– Cleanup
——————————————————————————–
References:

[ 1 ] Bug #1061857 – CVE-2014-0044 mumble: NULL pointer dereference leads to denial of service
https://bugzilla.redhat.com/show_bug.cgi?id=1061857
[ 2 ] Bug #1061858 – CVE-2014-0045 mumble: NULL pointer dereference leads to denial of service
https://bugzilla.redhat.com/show_bug.cgi?id=1061858
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update mumble’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2014-5767
2014-04-29 03:23:36
——————————————————————————–

Name : mumble
Product : Fedora 20
Version : 1.2.5
Release : 1.fc20
URL : http://mumble.sourceforge.net/
Summary : Voice chat suite aimed at gamers
Description :
Mumble provides low-latency, high-quality voice communication for gamers.
It includes game linking, so voice from other players comes
from the direction of their characters, and has echo
cancellation so that the sound from your loudspeakers
won’t be audible to other players.

——————————————————————————–
Update Information:

New upstream release 1.2.5.

This update fixes:
* CVE-2014-0044
* CVE-2014-0045
——————————————————————————–
ChangeLog:

* Fri Apr 25 2014 Christian Krause <chkr@fedoraproject.org> – 1.2.5-1
– Update 1.2.5 (BZ 1062209)
– Update fixes CVE-2014-0044 (BZ 1061857) and CVE-2014-0045 (BZ 1061858)
——————————————————————————–
References:

[ 1 ] Bug #1061857 – CVE-2014-0044 mumble: NULL pointer dereference leads to denial of service
https://bugzilla.redhat.com/show_bug.cgi?id=1061857
[ 2 ] Bug #1061858 – CVE-2014-0045 mumble: NULL pointer dereference leads to denial of service
https://bugzilla.redhat.com/show_bug.cgi?id=1061858
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update mumble’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

AutorMarko Stanec
Cert idNCERT-REF-2014-05-0013-ADV
CveCERT-CVE-DUMMY
ID izvornikaCERT-ORIGID-DUMMY
ProizvodCERT-DUMMY-PRODUCT
Izvorhttp://www.adobe.com/
Top
More in Preporuke
Sigurnosni nedostaci u jezgri operacijskog sustava

Otkriveni su sigurnosni nedostaci u jezgri operacijskog sustava RHEL. Otkriveni nedostaci potencijalnim napadačima omogućuju izvođenje napada uskraćivanja usluge, stjecanje povećanih...

Close