Login
Newsletter
Werbung

Sicherheit: Denial of Service in speech-dispatcher
Aktuelle Meldungen Distributionen
Name: Denial of Service in speech-dispatcher
ID: FEDORA-2014-8183
Distribution: Fedora
Plattformen: Fedora 20
Datum: Sa, 26. Juli 2014, 08:59
Referenzen: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3970
Applikationen: speech-dispatcher

Originalnachricht

Name        : speech-dispatcher
Product : Fedora 20
Version : 0.8
Release : 9.fc20
URL : http://devel.freebsoft.org/speechd
Summary : To provide a high-level device independent layer for speech
synthesis
Description :
* Common interface to different TTS engines
* Handling concurrent synthesis requests – requests may come
asynchronously from multiple sources within an application
and/or from more different applications.
* Subsequent serialization, resolution of conflicts and
priorities of incoming requests
* Context switching – state is maintained for each client
connection independently, event for connections from
within one application.
* High-level client interfaces for popular programming languages
* Common sound output handling – audio playback is handled by
Speech Dispatcher rather than the TTS engine, since most engines
have limited sound output capabilities.

-------------------------------------------------------------------------------
-
Update Information:

Rebase current post-4.0 snapshot to 5.0 release, see also:
http://www.freedesktop.org/wiki/Software/PulseAudio/Notes/5.0/

This update restores compatibility with pulseaudio upstream ABI, and includes
rebuilds of affected fedora packages.
-------------------------------------------------------------------------------
-
ChangeLog:

* Sun Jun 8 2014 Fedora Release Engineering
<rel-eng@lists.fedoraproject.org> - 0.8-9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Tue May 27 2014 Kalev Lember <kalevlember@gmail.com> - 0.8-8
- Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4
* Thu Mar 27 2014 Peter Robinson <pbrobinson@fedoraproject.org> 0.8-7
- Rebuild
* Fri Nov 1 2013 Matthias Clasen <mclasen@redhat.com> 0.8-6
- Avoid a crash in the festival module (#995639)
-------------------------------------------------------------------------------
-
References:

[ 1 ] Bug #1104835 - CVE-2014-3970 pulseaudio: denial of service in
module-rtp-recv
https://bugzilla.redhat.com/show_bug.cgi?id=1104835
-------------------------------------------------------------------------------
-

This update can be installed with the "yum" update program. Use
su -c 'yum update speech-dispatcher' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
-------------------------------------------------------------------------------
-
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung