-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2021-20297b2feb 2021-10-31 01:31:16.867270 --------------------------------------------------------------------------------

Name : stb Product : Fedora EPEL 8 Version : 0 Release : 0.7.20211022gitaf1a5bc.el8 URL : https://github.com/nothings/stb Summary : Single-file public domain libraries for C/C++ Description : Single-file public domain libraries for C/C++.

-------------------------------------------------------------------------------- Update Information:

Security fix for CVE-2021-42715 and CVE-2021-42716 -------------------------------------------------------------------------------- ChangeLog:

* Fri Oct 22 2021 Benjamin A. Beasley code@musicinmybrain.net - 0-0.7 - Security fix for CVE-2021-42715 and CVE-2021-42716 * Fri Oct 22 2021 Benjamin A. Beasley code@musicinmybrain.net - 0-0.6 - Update to af1a5bc: only issue templates are affected; packaged files should be identical. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2017908 - CVE-2021-42715 stb: DoS in stb_image HDR loader via a crafted file https://bugzilla.redhat.com/show_bug.cgi?id=2017908 [ 2 ] Bug #2017913 - CVE-2021-42716 stb: heap-based buffer overflow in stb_image PNM loader https://bugzilla.redhat.com/show_bug.cgi?id=2017913 --------------------------------------------------------------------------------

This update can be installed with the "yum" update programs. Use su -c 'yum update stb' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7%5C /html/System_Administrators_Guide/ch-yum.html

All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------