-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2021-83dbc3f7da 2021-05-01 01:31:06.381696 --------------------------------------------------------------------------------
Name : p7zip Product : Fedora 32 Version : 16.02 Release : 20.fc32 URL : http://p7zip.sourceforge.net/ Summary : Very high compression ratio file archiver Description : p7zip is a port of 7za.exe for Unix. 7-Zip is a file archiver with a very high compression ratio. The original version can be found at http://www.7-zip.org/.
-------------------------------------------------------------------------------- Update Information:
Fix two Null Pointer Dereferences, thanks to NSFOCUS Security Team -------------------------------------------------------------------------------- ChangeLog:
* Thu Apr 22 2021 S��rgio Basto sergio@serjux.com - 16.02-20 - Fix two Null Pointer Dereferences, thanks to NSFOCUS Security Team * Tue Jan 26 2021 Fedora Release Engineering releng@fedoraproject.org - 16.02-19 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Tue Jul 28 2020 Fedora Release Engineering releng@fedoraproject.org - 16.02-18 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1950901 - Private bug https://bugzilla.redhat.com/show_bug.cgi?id=1950901 [ 2 ] Bug #1950904 - Private bug https://bugzilla.redhat.com/show_bug.cgi?id=1950904 [ 3 ] Bug #1951219 - p7zip: Null Pointer Dereference in function Reserve via crafted rar file [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1951219 [ 4 ] Bug #1951220 - p7zip: Null Pointer Dereference in function Reserve via crafted rar file [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1951220 [ 5 ] Bug #1951225 - p7zip: Null Pointer Dereference in function ` NArchive::NLzh::CItem::GetUnixTime` via crafted lzh file [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1951225 [ 6 ] Bug #1951226 - p7zip: Null Pointer Dereference in function ` NArchive::NLzh::CItem::GetUnixTime` via crafted lzh file [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1951226 --------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-83dbc3f7da' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------