stable

libcue-2.2.1-13.fc37

FEDORA-2023-1fe05ac8d9 created by adamwill 2 years ago for Fedora 37

This update backports the fix for a serious security issue that could cause arbitrary code execution, tracked as CVE-2023-43641. See this write-up by Kevin Backhouse for details. Thanks to Kevin for discovering the issue and writing the fix.

Logout Required
After installing this update it is required that you logout of your current user session and log back in to ensure the changes supplied by this update are applied properly.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2023-1fe05ac8d9

This update has been submitted for testing by adamwill.

2 years ago

This update's test gating status has been changed to 'waiting'.

2 years ago

This update's test gating status has been changed to 'failed'.

2 years ago

This update's test gating status has been changed to 'waiting'.

2 years ago

This update's test gating status has been changed to 'passed'.

2 years ago

This update has been pushed to testing.

2 years ago

adamwill edited this update.

2 years ago
User Icon filiperosset commented & provided feedback 2 years ago
karma

no regressions noted

User Icon asciiwolf provided feedback 2 years ago
karma

This update has been submitted for stable by bodhi.

2 years ago

This update has been pushed to stable.

2 years ago

Please log in to add feedback.

Metadata
Type
security
Severity
urgent
Karma
2
Signed
Content Type
RPM
Test Gating
Autopush Settings
Unstable by Karma
-3
Stable by Karma
2
Stable by Time
14 days
Dates
submitted
2 years ago
in testing
2 years ago
in stable
2 years ago
modified
2 years ago
approved
2 years ago
BZ#2242943 1-Click RCE Exploit in Libcue (CVE-2023-43641)
0
0
BZ#2243167 CVE-2023-43641 libcue: a out-of-bounds array access leads to RCE [fedora-all]
0
0

Automated Test Results