FSA/F7/FEDORA-2007-0756

[SECURITY] Fedora 7 Update: HelixPlayer-1.0.7-6.fc7

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-0756
2007-06-29 07:04:04.349373
--------------------------------------------------------------------------------

Name        : HelixPlayer
Product     : Fedora 7
Version     : 1.0.7
Release     : 6.fc7
Summary     : Open source media player based on the Helix framework
Description :
Helix Player is an open-source media player built in the Helix
Community for consumers. Built using GTK, it plays open source formats,
like Ogg Vorbis and Theora using the powerful Helix DNA Client Media
Engine.

--------------------------------------------------------------------------------
Update Information:

A buffer overflow flaw was discovered in the way RealPlayer and HelixPlayer handle
the wallclock variable in Synchronized Multimedia Integration Language (SMIL) files.

More information regarding this flaw can be found here:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=547
--------------------------------------------------------------------------------
ChangeLog:

* Thu Jun 28 2007 Aurelien Bompard <abompard@fedoraproject.org> 1:1.0.7-6
- fix bug 245838 (CVE-2007-3410)
--------------------------------------------------------------------------------
References:

[ 1 ]  Bug #245838
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=245838
[ 2 ]  CVE-2007-3410
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3410
--------------------------------------------------------------------------------
Updated packages:

a270979cff90fefd8adf74e6f1dae1039d0fbdae HelixPlayer-plugin-1.0.7-6.fc7.i386.rpm
65335babaa60fd06ff46cc55fc8bff762073fa03 HelixPlayer-debuginfo-1.0.7-6.fc7.i386.rpm
afaaea61c7532366ec0ade929596a150a456ac2d HelixPlayer-1.0.7-6.fc7.i386.rpm
9e21e795c5c99950f730cc8e31220d888b6101a7 HelixPlayer-plugin-1.0.7-6.fc7.ppc.rpm
5039a5f16b6eb2cb63ea564665b70e0a3c5cc6ba HelixPlayer-debuginfo-1.0.7-6.fc7.ppc.rpm
ee2aa0d773f10c054afdba783dac7d7758ab66d1 HelixPlayer-1.0.7-6.fc7.ppc.rpm
bb8fa664c2f34c3d5e20aa957a8af6e7a5cdc1f8 HelixPlayer-1.0.7-6.fc7.src.rpm

This update can be installed with the 'yum' update program.  Use 'yum update
package-name' at the command line.  For more information, refer to 'Managing
Software with yum,' available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------