stable

libcue-2.2.1-13.fc38

FEDORA-2023-eec9ce5935 created by adamwill 4 months ago for Fedora 38

This update backports the fix for a serious security issue that could cause arbitrary code execution, tracked as CVE-2023-43641. See this write-up by Kevin Backhouse for details. Thanks to Kevin for discovering the issue and writing the fix.

Logout Required
After installing this update it is required that you logout of your current user session and log back in to ensure the changes supplied by this update are applied properly.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2023-eec9ce5935

This update has been submitted for testing by adamwill.

4 months ago

This update's test gating status has been changed to 'waiting'.

4 months ago
User Icon ttrinks commented & provided feedback 4 months ago
karma

wfm. no regression detected.

BZ#2242943 1-Click RCE Exploit in Libcue (CVE-2023-43641)

This update's test gating status has been changed to 'passed'.

4 months ago

This update has been pushed to testing.

4 months ago
User Icon besser82 commented & provided feedback 4 months ago
karma

Works great! LGTM! =)

This update has been submitted for stable by bodhi.

4 months ago
User Icon asciiwolf provided feedback 4 months ago
karma
BZ#2242943 1-Click RCE Exploit in Libcue (CVE-2023-43641)
User Icon rummsmurmel commented & provided feedback 4 months ago
karma

Thank you! Works!

User Icon stnert commented & provided feedback 4 months ago
karma

Testing... works for me. :)

User Icon boxjellyfish commented & provided feedback 4 months ago
karma

Works fine here, no issues. Thanks for the update.

adamwill edited this update.

4 months ago
User Icon filiperosset commented & provided feedback 4 months ago
karma

no regressions noted

This update has been pushed to stable.

4 months ago

Please login to add feedback.

Metadata
Type
security
Severity
urgent
Karma
7
Signed
Content Type
RPM
Test Gating
Settings
Unstable by Karma
-3
Stable by Karma
2
Stable by Time
14 days
Dates
submitted
4 months ago
in testing
4 months ago
in stable
4 months ago
modified
4 months ago
approved
4 months ago
BZ#2242943 1-Click RCE Exploit in Libcue (CVE-2023-43641)
0
2
BZ#2243167 CVE-2023-43641 libcue: a out-of-bounds array access leads to RCE [fedora-all]
0
0

Automated Test Results