[SECURITY] Fedora 10 Update: xine-lib-1.1.16-1.fc10

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-0483
2009-01-14 23:37:37
--------------------------------------------------------------------------------

Name        : xine-lib
Product     : Fedora 10
Version     : 1.1.16
Release     : 1.fc10
URL         : http://xinehq.de/
Summary     : Xine library
Description :
This package contains the Xine library. Xine is a free multimedia player.
It can play back various media. It also decodes multimedia files from local
disk drives, and displays multimedia streamed over the Internet. It
interprets many of the most common multimedia formats available - and some
of the most uncommon formats, too.  --with/--without rpmbuild options
(some default values depend on target distribution): aalib, caca, directfb,
imagemagick, freetype, antialiasing (with freetype), pulseaudio, xcb.

--------------------------------------------------------------------------------
Update Information:

This updates xine-lib to the upstream 1.1.16 release. This fixes several bugs,
including the security issues CVE-2008-5234 vector 1, CVE-2008-5236,
CVE-2008-5237, CVE-2008-5239, CVE-2008-5240 vectors 3 & 4 and CVE-2008-5243. See
http://sourceforge.net/project/shownotes.php?release_id=652075&group_id=9655 for
the full list of changes.    In addition, the Fedora xine-lib package now
includes the demuxers for the MPEG container format, which are not patent-
encumbered. (The decoders for actual MPEG video and audio data are still
excluded due to software patents.)
--------------------------------------------------------------------------------
ChangeLog:

* Wed Jan  7 2009 Rex Dieter <rdieter at fedoraproject.org> - 1.1.16-1
- xine-lib-1.1.16, plugin ABI 1.25
- --with-external-libdvdnav, include mpeg demuxers (#213597)
* Fri Dec 12 2008 Rex Dieter <rdieter at fedoraproject.org> - 1.1.15-4
- rebuild for pkgconfig deps
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #213597 - xine-lib: include MPEG demuxers
        https://bugzilla.redhat.com/show_bug.cgi?id=213597
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update xine-lib' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------