stable

libdxfrw-1.0.1-1.fc35 and librecad-2.2.0-0.11.rc2.fc35

FEDORA-2021-fa9e3c23f2 created by spot 3 years ago for Fedora 35

Update libdxfrw to 1.0.1 (from upstream git). Rebuild librecad against it.

This fixes CVE-2021-21898, CVE-2021-21899, and CVE-2021-21900.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2021-fa9e3c23f2

This update has been submitted for testing by spot.

3 years ago

This update's test gating status has been changed to 'ignored'.

3 years ago

This update has been pushed to testing.

3 years ago

This update has been submitted for stable by bodhi.

3 years ago

This update has been pushed to stable.

3 years ago

Please login to add feedback.

Metadata
Type
security
Severity
high
Karma
0
Signed
Content Type
RPM
Test Gating
Builds
2
libdxfrw-1.0.1-1.fc35
librecad-2.2.0-0.11.rc2.fc35
Settings
Unstable by Karma
-3
Stable by Karma
3
Stable by Time
7 days
Dates
submitted
3 years ago
in testing
3 years ago
in stable
3 years ago
BZ#2025628 CVE-2021-21899 librecad: heap out-of-bounds write in dwgCompressor:copyCompBytes21
0
0
BZ#2025629 CVE-2021-21899 librecad: heap out-of-bounds write in dwgCompressor:copyCompBytes21 [fedora-all]
0
0
BZ#2025631 CVE-2021-21900 librecad: use-after-free in dxfRW:processLType()
0
0
BZ#2025633 CVE-2021-21900 librecad: use-after-free in dxfRW:processLType() [fedora-all]
0
0
BZ#2025634 CVE-2021-21898 librecad: out-of-bounds write in dwgCompressor:decompress18()
0
0
BZ#2025636 CVE-2021-21898 librecad: out-of-bounds write in dwgCompressor:decompress18() [fedora-all]
0
0
libdxfrw-1.0.1-1.fc35
librecad-2.2.0-0.11.rc2.fc35

Automated Test Results

Copyright © 2007-2024 Red Hat, Inc. and others.

Running bodhi-server 8.2.0 on bodhi-web-172-c9pvp.

bodhi is Free Software. Please file issues if you have any problems. Read the documentation.

• Composes • Legal • Privacy policy •