FEDORA-2018-30a8492364 — security update for libcdio

stable

libcdio-0.94-5.fc27

FEDORA-2018-30a8492364 created by adrian 8 years ago for Fedora 27

Added patch to fix: CVE-2017-18198 (#1549644) Added patch to fix: CVE-2017-18199 (#1549701) Added patches to fix: CVE-2017-18201 (#1549707)

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2018-30a8492364

This update has been submitted for testing by adrian.

8 years ago

This update has been pushed to testing.

8 years ago

cserpentis commented & provided feedback 8 years ago

karma

works for me

filiperosset commented & provided feedback 8 years ago

karma

no regressions noted

pwalter commented & provided feedback 8 years ago

karma

Works

This update has been submitted for batched by adrian.

8 years ago

This update has been submitted for stable by bodhi.

8 years ago

This update has been pushed to stable.

8 years ago

Please log in to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-3

Stable by Karma

disabled

Stable by Time

disabled

Dates

submitted

8 years ago

in testing

8 years ago

in stable

8 years ago

Builds

libcdio-0.94-5.fc27

BZ#1549644 CVE-2017-18198 libcdio: Heap-based buffer over-read in print_iso9660_recurse function in iso-info.c

BZ#1549701 CVE-2017-18199 libcdio: NULL pointer dereference in realloc_symlink in rock.c

BZ#1549707 CVE-2017-18201 libcdio: Double free in get_cdtext_generic() in lib/driver/_cdio_generic.c

BZ#1549713 CVE-2017-18198 CVE-2017-18199 CVE-2017-18201 libcdio: various flaws [fedora-all]

libcdio-0.94-5.fc27

Automated Test Results

passed