--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-cd37548bc5
2021-12-01 00:36:57.204760
--------------------------------------------------------------------------------
Name : librecad
Product : Fedora EPEL 7
Version : 2.2.0
Release : 0.11.rc2.el7
URL :
http://librecad.org/
Summary : Computer Assisted Design (CAD) Application
Description :
A graphical and comprehensive 2D CAD application.
--------------------------------------------------------------------------------
Update Information:
Update libdxfrw to 1.0.1 (from upstream git). Rebuild librecad against it. This
fixes CVE-2021-21898, CVE-2021-21899, and CVE-2021-21900.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 22 2021 Tom Callaway <spot(a)fedoraproject.org> - 2.2.0-0.11.rc2
- rebuild against new libdxfrw
- rebase to 1d31427
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> -
2.2.0-0.10.rc2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> -
2.2.0-0.9.rc2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Thu Dec 31 2020 Tom Callaway <spot(a)fedoraproject.org> - 2.2.0-0.8.rc2
- update to rc2
* Wed Nov 4 2020 Tom Callaway <spot(a)fedoraproject.org> - 2.2.0-0.7.rc1
- update to latest git main
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> -
2.2.0-0.6.rc1
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> -
2.2.0-0.5.rc1
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
2.2.0-0.4.rc1
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Thu Jun 6 2019 Tom Callaway <spot(a)fedoraproject.org> - 2.2.0-0.3.rc1
- apply fix for non-unique shared object naming conflicts
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
2.2.0-0.2.rc1
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Mon Jul 23 2018 Tom Callaway <spot(a)fedoraproject.org> - 2.2.0-0.1.rc1
- update to 2.2.0-rc1
- add BuildRequires: gcc-c++
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.0-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.0-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.0-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.0-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Fri Jan 27 2017 Jonathan Wakely <jwakely(a)redhat.com> - 2.1.0-3
- Rebuilt for Boost 1.63
* Sun Dec 11 2016 Igor Gnatenko <ignatenko(a)redhat.com> - 2.1.0-2
- Rebuild for shapelib SONAME bump
* Mon Jun 6 2016 Tom Callaway <spot(a)fedoraproject.org> - 2.1.0-1
- update to 2.1.0
* Mon May 16 2016 Tom Callaway <spot(a)fedoraproject.org> - 2.0.10-1
- update to 2.0.10
* Thu Feb 4 2016 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.9-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
* Fri Jan 15 2016 Jonathan Wakely <jwakely(a)redhat.com> - 2.0.9-2
- Rebuilt for Boost 1.60
* Tue Jan 12 2016 Tom Callaway <spot(a)fedoraproject.org> - 2.0.9-1
- update to 2.0.9
* Fri Sep 11 2015 Tom Callaway <spot(a)fedoraproject.org> - 2.0.8-1
- update to 2.0.8
* Thu Aug 27 2015 Jonathan Wakely <jwakely(a)redhat.com> - 2.0.7-8
- Rebuilt for Boost 1.59
* Wed Jul 29 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.0.7-7
- Rebuilt for
https://fedoraproject.org/wiki/Changes/F23Boost159
* Wed Jul 22 2015 David Tardon <dtardon(a)redhat.com> - 2.0.7-6
- rebuild for Boost 1.58
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.0.7-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
* Sat May 2 2015 Kalev Lember <kalevlember(a)gmail.com> - 2.0.7-4
- Rebuilt for GCC 5 C++11 ABI change
* Thu Mar 26 2015 Richard Hughes <rhughes(a)redhat.com> - 2.0.7-3
- Add an AppData file for the software center
* Tue Jan 27 2015 Petr Machata <pmachata(a)redhat.com> - 2.0.7-2
- Rebuild for boost 1.57.0
* Mon Jan 5 2015 Tom Callaway <spot(a)fedoraproject.org> - 2.0.7-1
- update to 2.0.7
* Wed Nov 5 2014 Tom Callaway <spot(a)fedoraproject.org> - 2.0.6-1
- update to 2.0.6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2025628 - CVE-2021-21899 librecad: heap out-of-bounds write in
dwgCompressor:copyCompBytes21
https://bugzilla.redhat.com/show_bug.cgi?id=2025628
[ 2 ] Bug #2025631 - CVE-2021-21900 librecad: use-after-free in dxfRW:processLType()
https://bugzilla.redhat.com/show_bug.cgi?id=2025631
[ 3 ] Bug #2025634 - CVE-2021-21898 librecad: out-of-bounds write in
dwgCompressor:decompress18()
https://bugzilla.redhat.com/show_bug.cgi?id=2025634
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update librecad' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------