stable

usd-25.02a-5.fc42

FEDORA-2025-2e7d5d49f2 created by music 10 months ago for Fedora 42

Backport fix for CVE-2025-14439/GHSA-grjp-54v3-c442

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2025-2e7d5d49f2

This update has been submitted for testing by music.

10 months ago

This update's test gating status has been changed to 'ignored'.

10 months ago

This update has been pushed to testing.

10 months ago

music edited this update.

10 months ago

music edited this update.

10 months ago

music edited this update.

10 months ago

This update has been submitted for stable by bodhi.

9 months ago

This update has been pushed to stable.

9 months ago

Please log in to add feedback.

Metadata
Type
security
Severity
medium
Karma
0
Signed
Content Type
RPM
Test Gating
Autopush Settings
Unstable by Karma
-3
Stable by Karma
3
Stable by Time
7 days
Dates
submitted
10 months ago
in testing
10 months ago
in stable
9 months ago
modified
10 months ago
approved
9 months ago
BZ#2422275 CVE-2025-14439 usd: OpenUSD File Parsing Use-After-Free Remote Code Execution Vulnerability [fedora-42]
0
0
BZ#2424910 CVE-2025-12839 usd: OpenEXR: Remote Code Execution via Heap-based Buffer Overflow in EXR File Parsing [fedora-42]
0
0
BZ#2424912 CVE-2025-12840 usd: OpenEXR: Remote Code Execution via EXR file parsing heap-based buffer overflow [fedora-42]
0
0
BZ#2424917 CVE-2025-12495 usd: OpenEXR: Remote Code Execution via malicious EXR file parsing [fedora-42]
0
0

Automated Test Results