FEDORA-EPEL-2016-58b3766907 — security update for libebml

stable

libebml-1.2.2-1.el6

FEDORA-EPEL-2016-58b3766907 created by rathann 10 years ago for Fedora EPEL 6

New in 1.2.2 version:

fix usage of the DEBUG #define (use LIBEBML_DEBUG instead)
The EbmlCodeVersion variable now resides in the library instead of being declared static in the header file.
only use the test element to read once in the loop

Backported fixes for:

CVE-2015-8789 libebml: Usa-after-free vulnerability in EblMaster::Read()
CVE-2015-8790 CVE-2015-8791 libebml: information leaks in two functions

This update has been submitted for testing by rathann.

10 years ago

This update has been pushed to testing.

10 years ago

This update has reached 14 days in testing and can be pushed to stable now if the maintainer wishes

10 years ago

This update has been submitted for stable by rathann.

10 years ago

This update has been pushed to stable.

10 years ago

Please log in to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

None

Autopush Settings

Unstable by Karma

-1

Stable by Karma

Stable by Time

disabled

Dates

submitted

10 years ago

in testing

10 years ago

in stable

10 years ago

Builds

libebml-1.2.2-1.el6

BZ#1276337 CVE-2015-8789 libebml: Usa-after-free vulnerability in EblMaster::Read() [epel-all]

BZ#1303854 CVE-2015-8791 CVE-2015-8790 libebml: information leaks in two functions [epel-6]

libebml-1.2.2-1.el6

Automated Test Results

None