FEDORA-2022-29327a4b98 — security update for stb

stable

stb-0^20210910gitaf1a5bc-0.2.fc34

FEDORA-2022-29327a4b98 created by music 2 years ago for Fedora 34

Security fix for CVE-2022-28041, CVE-2022-28042, CVE-2022-28048

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2022-29327a4b98

This update has been submitted for testing by music.

2 years ago

This update's test gating status has been changed to 'ignored'.

2 years ago

This update has been pushed to testing.

2 years ago

music edited this update.

2 years ago

This update has been submitted for stable by bodhi.

2 years ago

This update has been pushed to stable.

2 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

stb-0^20210910gitaf1a5bc-0.2.fc34

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

2 years ago

in testing

2 years ago

in stable

2 years ago

modified

2 years ago

BZ#2077019 CVE-2022-28041 stb: integer overflow in stbi__jpeg_decode_block_prog_dc() can lead to DoS

BZ#2077020 CVE-2022-28041 stb: integer overflow in stbi__jpeg_decode_block_prog_dc() can lead to DoS [fedora-all]

BZ#2077022 CVE-2022-28042 stb: use-after-free in stbi__jpeg_huff_decode()

BZ#2077023 CVE-2022-28042 stb: use-after-free in stbi__jpeg_huff_decode() [fedora-all]

BZ#2077028 CVE-2022-28048 stb: integer shift of invalid size in stbi__jpeg_decode_block_prog_ac()

BZ#2077029 CVE-2022-28048 stb: integer shift of invalid size in stbi__jpeg_decode_block_prog_ac() [fedora-all]

stb-0^20210910gitaf1a5bc-0.2.fc34

Automated Test Results

ignored