--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-284f18e5de
2020-11-07 00:51:31.215031
--------------------------------------------------------------------------------
Name : lout
Product : Fedora EPEL 7
Version : 3.40
Release : 18.el7
URL :
http://savannah.nongnu.org/projects/lout/
Summary : A document formatting system
Description :
Lout is a document formatting system designed and implemented by Jeffrey
Kingston at the Basser Department of Computer Science, University of
Sydney, Australia. The system reads a high-level description of a document
similar in style to LaTeX and produces a PostScript file which can be
printed on most laser printers and graphic display devices. Plain text
output is also available, PDF output is limited but working (e.g. no
graphics). Lout is inherently multilingual. Adding new languages is easy.
--------------------------------------------------------------------------------
Update Information:
Add lout-3.40-cve.patch from
https://lists.nongnu.org/archive/html/lout-
users/2020-10/msg00013.html fixing rhbz#1787383 and rhbz#1787386
(CVE-2019-19918 and CVE-2019-19917), two buffer overflows.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 23 2020 Mat��j Cepl <mcepl(a)cepl.eu> - 3.40-18
- Add lout-3.40-cve.patch from
https://lists.nongnu.org/archive/html/lout-users/2020-10/msg00013.html
fixing rhbz#1787383 and rhbz#1787386 (CVE-2019-19918 and
CVE-2019-19917), two buffer overflows.
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.40-17
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.40-16
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.40-15
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.40-14
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.40-13
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Mon Feb 19 2018 Mat��j Cepl <mcepl(a)redhat.com> - 3.40-12
- Fix rpmlint issues.
* Mon Feb 19 2018 Mat��j Cepl <mcepl(a)redhat.com> - 3.40-11
- Add BuildRequires gcc per new PG.
- Fix FSF addresses (actually, remove them as the upstream does).
* Thu Feb 8 2018 Mat��j Cepl <mcepl(a)redhat.com> - 3.40-10
- Remove Group, it has been unnecessary since RHEL-6.
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.40-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.40-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.40-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.40-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1787384 - CVE-2019-19918 lout: heap-based buffer overflow in srcnext in z02.c
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1787384
[ 2 ] Bug #1787385 - CVE-2019-19918 lout: heap-based buffer overflow in srcnext in z02.c
[epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=1787385
[ 3 ] Bug #1787386 - CVE-2019-19918 lout: heap-based buffer overflow in srcnext in z02.c
[epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1787386
[ 4 ] Bug #1787389 - CVE-2019-19917 lout: buffer overflow in StringQuotedWord in z39.c
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1787389
[ 5 ] Bug #1787390 - CVE-2019-19917 lout: buffer overflow in StringQuotedWord in z39.c
[epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=1787390
[ 6 ] Bug #1787391 - CVE-2019-19917 lout: buffer overflow in StringQuotedWord in z39.c
[epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1787391
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update lout' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------