From Fedora Project Wiki
[SECURITY] Fedora 7 Update: HelixPlayer-1.0.7-6.fc7
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2007-0756 2007-06-29 07:04:04.349373 -------------------------------------------------------------------------------- Name : HelixPlayer Product : Fedora 7 Version : 1.0.7 Release : 6.fc7 Summary : Open source media player based on the Helix framework Description : Helix Player is an open-source media player built in the Helix Community for consumers. Built using GTK, it plays open source formats, like Ogg Vorbis and Theora using the powerful Helix DNA Client Media Engine. -------------------------------------------------------------------------------- Update Information: A buffer overflow flaw was discovered in the way RealPlayer and HelixPlayer handle the wallclock variable in Synchronized Multimedia Integration Language (SMIL) files. More information regarding this flaw can be found here: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=547 -------------------------------------------------------------------------------- ChangeLog: * Thu Jun 28 2007 Aurelien Bompard <abompard@fedoraproject.org> 1:1.0.7-6 - fix bug 245838 (CVE-2007-3410) -------------------------------------------------------------------------------- References: [ 1 ] Bug #245838 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=245838 [ 2 ] CVE-2007-3410 http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3410 -------------------------------------------------------------------------------- Updated packages: a270979cff90fefd8adf74e6f1dae1039d0fbdae HelixPlayer-plugin-1.0.7-6.fc7.i386.rpm 65335babaa60fd06ff46cc55fc8bff762073fa03 HelixPlayer-debuginfo-1.0.7-6.fc7.i386.rpm afaaea61c7532366ec0ade929596a150a456ac2d HelixPlayer-1.0.7-6.fc7.i386.rpm 9e21e795c5c99950f730cc8e31220d888b6101a7 HelixPlayer-plugin-1.0.7-6.fc7.ppc.rpm 5039a5f16b6eb2cb63ea564665b70e0a3c5cc6ba HelixPlayer-debuginfo-1.0.7-6.fc7.ppc.rpm ee2aa0d773f10c054afdba783dac7d7758ab66d1 HelixPlayer-1.0.7-6.fc7.ppc.rpm bb8fa664c2f34c3d5e20aa957a8af6e7a5cdc1f8 HelixPlayer-1.0.7-6.fc7.src.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://docs.fedoraproject.org/yum/. --------------------------------------------------------------------------------