FEDORA-2018-199e6065ee — security update for libcdio

stable

libcdio-0.94-5.fc26

FEDORA-2018-199e6065ee created by adrian 7 years ago for Fedora 26

Added patch to fix: CVE-2017-18198 (#1549644) Added patch to fix: CVE-2017-18199 (#1549701) Added patches to fix: CVE-2017-18201 (#1549707)

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2018-199e6065ee

This update has been submitted for testing by adrian.

7 years ago

This update has been pushed to testing.

7 years ago

cserpentis commented & provided feedback 7 years ago

karma

works for me in a VM

pwalter commented & provided feedback 7 years ago

karma

Works

This update has been submitted for batched by adrian.

7 years ago

This update has been submitted for stable by bodhi.

7 years ago

This update has been pushed to stable.

7 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

7 years ago

in testing

7 years ago

in stable

7 years ago

Builds

libcdio-0.94-5.fc26

BZ#1549644 CVE-2017-18198 libcdio: Heap-based buffer over-read in print_iso9660_recurse function in iso-info.c

BZ#1549701 CVE-2017-18199 libcdio: NULL pointer dereference in realloc_symlink in rock.c

BZ#1549707 CVE-2017-18201 libcdio: Double free in get_cdtext_generic() in lib/driver/_cdio_generic.c

BZ#1549713 CVE-2017-18198 CVE-2017-18199 CVE-2017-18201 libcdio: various flaws [fedora-all]

libcdio-0.94-5.fc26

Automated Test Results

passed