Fedora 9 Update: xine-lib-1.1.15-1.fc9
Summary
This package contains the Xine library. Xine is a free multimedia player.
It can play back various media. It also decodes multimedia files from local
disk drives, and displays multimedia streamed over the Internet. It
interprets many of the most common multimedia formats available - and some
of the most uncommon formats, too. --with/--without rpmbuild options
(some default values depend on target distribution): aalib, caca, directfb,
imagemagick, freetype, antialiasing (with freetype), pulseaudio, xcb.
Update Information:
This release fixes multiple bugs and security issues: - DoS via corrupted Ogg files (CVE-2008-3231) - multiple possible buffer overflows detailed in oCERT-2008-008 For more details, see: ;group_id=9655 http://ocert.org/advisories/ocert-2008-008.html NOTE: A coordinated release with 3rd-party repos was not possible, so this update may result in dependency issues with currently-installed xine-lib-extras-* rpms. This temporary problem will be rectified asap.
Change Log
* Wed Aug 20 2008 Rex Dieter
References
[ 1 ] Bug #456057 - CVE-2008-3231 xine-lib: crash on zzuf test case lol-ffplay.ogg https://bugzilla.redhat.com/show_bug.cgi?id=456057
Update Instructions
This update can be installed with the "yum" update program. Use su -c 'yum update xine-lib' at the command line. For more information, refer to "Managing Software with yum", available at .