[SECURITY] Fedora 8 Update: zoneminder-1.22.3-10.fc8

updates at fedoraproject.org updates at fedoraproject.org
Sat May 10 13:56:09 UTC 2008


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3462
2008-05-09 22:17:04
--------------------------------------------------------------------------------

Name        : zoneminder
Product     : Fedora 8
Version     : 1.22.3
Release     : 10.fc8
URL         : http://www.zoneminder.com/
Summary     : A camera monitoring and analysis tool
Description :
ZoneMinder is a set of applications which is intended to provide a complete
solution allowing you to capture, analyse, record and monitor any cameras you
have attached to a Linux based machine. It is designed to run on kernels which
support the Video For Linux (V4L) interface and has been tested with cameras
attached to BTTV cards, various USB cameras and IP network cameras. It is
designed to support as many cameras as you can attach to your computer without
too much degradation of performance. This package includes cambozola.jar.

--------------------------------------------------------------------------------
ChangeLog:

* Tue Apr 29 2008 Martin Ebourne <martin at zepler.org> - 1.22.3-10
- Patch for CVE-2008-1381
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #444434 - CVE-2008-1381 zoneminder: command injection via unescaped php exec() calls
        https://bugzilla.redhat.com/show_bug.cgi?id=444434
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update zoneminder' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------




More information about the Fedora-package-announce mailing list