FEDORA-EPEL-2016-58b3766907 — security update for libebml

stable

libebml-1.2.2-1.el6

FEDORA-EPEL-2016-58b3766907 created by rathann 8 years ago for Fedora EPEL 6

New in 1.2.2 version:

fix usage of the DEBUG #define (use LIBEBML_DEBUG instead)
The EbmlCodeVersion variable now resides in the library instead of being declared static in the header file.
only use the test element to read once in the loop

Backported fixes for:

CVE-2015-8789 libebml: Usa-after-free vulnerability in EblMaster::Read()
CVE-2015-8790 CVE-2015-8791 libebml: information leaks in two functions

This update has been submitted for testing by rathann.

8 years ago

This update has been pushed to testing.

8 years ago

This update has reached 14 days in testing and can be pushed to stable now if the maintainer wishes

8 years ago

This update has been submitted for stable by rathann.

8 years ago

This update has been pushed to stable.

8 years ago

Please login to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

libebml-1.2.2-1.el6

Settings

Unstable by Karma

-1

Stable by Karma

Stable by Time

disabled

Dates

submitted

8 years ago

in testing

8 years ago

in stable

8 years ago

BZ#1276337 CVE-2015-8789 libebml: Usa-after-free vulnerability in EblMaster::Read() [epel-all]

BZ#1303854 CVE-2015-8791 CVE-2015-8790 libebml: information leaks in two functions [epel-6]

libebml-1.2.2-1.el6

Automated Test Results

None