Fedora 9 Update: amarok-1.4.10-2.fc9
Posted by Benjamin D. Thomas   
Fedora This build includes a security fix concerning the parsing of malformed Audible digital audio files.
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-0715
2009-01-21 20:33:27
--------------------------------------------------------------------------------

Name        : amarok
Product     : Fedora 9
Version     : 1.4.10
Release     : 2.fc9
URL         : http://amarok.kde.org
Summary     : Media player
Description :
Amarok is a multimedia player with:
 - fresh playlist concept, very fast to use, with drag and drop
 - plays all formats supported by the various engines
 - audio effects, like reverb and compressor
 - compatible with the .m3u and .pls formats for playlists
 - nice GUI, integrates into the KDE look, but with a unique touch


Amarok can use various engines to decode sound : helix and xine.
To use the helix engine, you need to install either HelixPlayer
or RealPlayer

--------------------------------------------------------------------------------
Update Information:

This build includes a security fix concerning the parsing of malformed Audible
digital audio files.
--------------------------------------------------------------------------------
ChangeLog:

* Mon Jan 12 2009 Rex Dieter  - 1.4.10-2
- backport security patch
* Wed Aug 13 2008 Rex Dieter  - 1.4.10-1
- amarok-1.4.10
* Wed Jun 11 2008 Dennis Gilmore  - 1.4.9.1-4
- we are building sparc32 as sparcv9 not sparc now  fix ifnarch
* Fri May  2 2008 Rex Dieter  - 1.4.9.1-3
- fix libnjb support (#444940)
* Thu May  1 2008 Rex Dieter  - 1.4.9.1-2.1
- --with-libvisual fedora-only (epel misses libvisual-plugins)
* Thu Apr 17 2008 Rex Dieter  - 1.4.9.1-2
- specfile typo (unclosed macro)
* Tue Apr 15 2008 Rex Dieter  - 1.4.9.1-1
- amarok-1.4.9.1
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #479560 - amarok: multiple buffer overflows when parsing Audible .aa files
        https://bugzilla.redhat.com/show_bug.cgi?id=479560
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update amarok' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------

_______________________________________________
Fedora-package-announce mailing list
Fedora-package-announce@redhat.com
http://www.redhat.com/mailman/listinfo/fedora-package-announce