[SECURITY] Fedora 9 Update: xine-lib-1.1.15-1.fc9

updates at fedoraproject.org updates at fedoraproject.org
Wed Sep 10 07:09:25 UTC 2008

Fedora Update Notification
2008-09-05 10:48:46

Name        : xine-lib
Product     : Fedora 9
Version     : 1.1.15
Release     : 1.fc9
URL         : http://xinehq.de/
Summary     : Xine library
Description :
This package contains the Xine library. Xine is a free multimedia player.
It can play back various media. It also decodes multimedia files from local
disk drives, and displays multimedia streamed over the Internet. It
interprets many of the most common multimedia formats available - and some
of the most uncommon formats, too.  --with/--without rpmbuild options
(some default values depend on target distribution): aalib, caca, directfb,
imagemagick, freetype, antialiasing (with freetype), pulseaudio, xcb.

Update Information:

This release fixes multiple bugs and security issues:  - DoS via corrupted Ogg
files (CVE-2008-3231)  - multiple possible buffer overflows detailed in
oCERT-2008-008    For more details, see:
http://www.ocert.org/advisories/ocert-2008-008.html    NOTE: A coordinated
release with 3rd-party repos was not possible, so this update may result in
dependency issues with currently-installed xine-lib-extras-* rpms.  This
temporary problem will be rectified asap.

* Wed Aug 20 2008 Rex Dieter <rdieter at fedoraproject.org> - 1.1.15-1
- xine-lib-1.1.15, plugin ABI 1.24 (rh#455752, CVE-2008-3231)
- Obsoletes: -arts (f9+)
* Sun Apr 27 2008 Kevin Kofler <Kevin at tigcc.ticalc.org> - 1.1.12-3
- rebuild for new ImageMagick (

  [ 1 ] Bug #456057 - CVE-2008-3231 xine-lib: crash on zzuf test case lol-ffplay.ogg

This update can be installed with the "yum" update program.  Use 
su -c 'yum update xine-lib' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at

More information about the Fedora-package-announce mailing list