FEDORA-EPEL-2016-58b3766907

security update in Fedora EPEL 6 for libebml

Status: stable 3 years ago

New in 1.2.2 version:

  • fix usage of the DEBUG #define (use LIBEBML_DEBUG instead)
  • The EbmlCodeVersion variable now resides in the library instead of being declared static in the header file.
  • only use the test element to read once in the loop

Backported fixes for:

  • CVE-2015-8789 libebml: Usa-after-free vulnerability in EblMaster::Read()
  • CVE-2015-8790 CVE-2015-8791 libebml: information leaks in two functions

How to install

sudo dnf upgrade --advisory=FEDORA-EPEL-2016-58b3766907

Comments 5

This update has been submitted for testing by rathann.

This update has been pushed to testing.

This update has reached 14 days in testing and can be pushed to stable now if the maintainer wishes

This update has been submitted for stable by rathann.

This update has been pushed to stable.

Content Type
RPM
Status
stable
Test Gating
Submitted by
Update Type
security
Update Severity
high
Karma
0
stable threshold: 2
unstable threshold: -1
Autopush
Enabled
Dates
submitted 3 years ago
in testing 3 years ago
in stable 3 years ago

Related Bugs 2

00 #1276337 CVE-2015-8789 libebml: Usa-after-free vulnerability in EblMaster::Read() [epel-all]
00 #1303854 CVE-2015-8791 CVE-2015-8790 libebml: information leaks in two functions [epel-6]

Automated Test Results