The following Fedora 25 Security updates need testing:
Age URL
248
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d79ba708cb exim-4.87.1-1.fc25
146
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e2d17af41e
python-XStatic-jquery-ui-1.12.0.1-4.fc25
86
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5d7498559f
nodejs-brace-expansion-1.1.7-1.fc25
45
https://bodhi.fedoraproject.org/updates/FEDORA-2017-86cfcbbae8
libstaroffice-0.0.4-1.fc25
40
https://bodhi.fedoraproject.org/updates/FEDORA-2017-99c0118c0c
memcached-1.4.39-1.fc25
36
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2232fe97b4
docker-distribution-2.6.2-1.git48294d9.fc25
18
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7e5ac0896e
botan-1.10.16-1.fc25
17
https://bodhi.fedoraproject.org/updates/FEDORA-2017-fa1d8ad61a
mercurial-3.8.1-4.fc25
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-270ab2baa3 glibc-2.24-10.fc25
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a00a087fd4
tomcat-8.0.46-1.fc25
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-902970c18f
drupal8-8.3.7-1.fc25
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bdd0b565ef
thunderbird-52.3.0-1.fc25
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f0b31bc9c5
mingw-libzip-1.1.3-2.fc25
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7dacb3c21c
augeas-1.8.1-1.fc25
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8ab30db61c
copr-dist-git-0.36-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-3a568adb31
ImageMagick-6.9.9.9-1.fc25 WindowMaker-0.95.7-3.fc25.1 autotrace-0.31.1-49.fc25
converseen-0.9.6.2-3.fc25 drawtiming-0.7.1-22.fc25 emacs-25.2-5.fc25 gtatool-2.2.0-6.fc25
imageinfo-0.05-27.fc25 inkscape-0.92.1-4.20170510bzr15686.fc25.1 k3d-0.8.0.6-8.fc25
kxstitch-1.2.0-9.fc25 perl-Image-SubImageFind-0.03-13.fc25 pfstools-2.0.6-3.fc25
php-pecl-imagick-3.4.3-2.fc25 psiconv-0.9.8-22.fc25 q-7.11-29.fc25 ripright-0.11-5.fc25
rss-glx-0.9.1.p-27.fc25.1 rubygem-rmagick-2.16.0-4.fc25.2 synfig-1.2.0-1.fc25.1
synfigstudio-1.2.0-5.fc25 techne-0.2.3-20.fc25
vdr-scraper2vdr-1.0.5-4.20170611git254122b.fc25 vips-8.4.4-1.fc25.1
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-3abea58794
mbedtls-2.6.0-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c708c044e3
chromium-60.0.3112.113-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a69b0bb52d gd-2.2.5-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-57722ccd30
libidn2-2.0.4-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ed735463e3 xen-4.7.3-4.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-deefb26e8b
mingw-openjpeg2-2.2.0-2.fc25 openjpeg2-2.2.0-2.fc25
The following Fedora 25 Critical Path updates have yet to be approved:
Age URL
90
https://bodhi.fedoraproject.org/updates/FEDORA-2017-613a72e282 lorax-25.22-1.fc25
18
https://bodhi.fedoraproject.org/updates/FEDORA-2017-67705933e3
glusterfs-3.10.5-1.fc25
17
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0c6291cd4b
pango-1.40.9-1.fc25
13
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ee474bb41c file-5.29-9.fc25
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e22c6d53db
mariadb-10.1.26-2.fc25
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-270ab2baa3 glibc-2.24-10.fc25
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bb07876a1c nspr-4.16.0-1.fc25
nss-3.32.0-1.1.fc25 nss-softokn-3.32.0-1.2.fc25 nss-util-3.32.0-1.0.fc25
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a6fc26e60e vim-8.0.983-1.fc25
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-08a8ae97e7
gnutls-3.5.15-1.fc25
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a2f2ef5a3c
NetworkManager-1.4.6-1.fc25
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bdd0b565ef
thunderbird-52.3.0-1.fc25
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9168a2790d
libglvnd-0.2.999-24.20170818git8d4d03f.fc25
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-966ff8db5a
pungi-4.1.18-1.fc25
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7dacb3c21c
augeas-1.8.1-1.fc25
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9badc4b4fa
upower-0.99.5-2.fc25
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e8df43a1e0
python3-3.5.4-1.fc25
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-66902d17b7
firefox-55.0.2-2.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d027c0b6ef
appstream-data-25-22.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-deefb26e8b
mingw-openjpeg2-2.2.0-2.fc25 openjpeg2-2.2.0-2.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ed735463e3 xen-4.7.3-4.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c4ab9b29f2
publicsuffix-list-20170809-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-57722ccd30
libidn2-2.0.4-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-3a568adb31
ImageMagick-6.9.9.9-1.fc25 WindowMaker-0.95.7-3.fc25.1 autotrace-0.31.1-49.fc25
converseen-0.9.6.2-3.fc25 drawtiming-0.7.1-22.fc25 emacs-25.2-5.fc25 gtatool-2.2.0-6.fc25
imageinfo-0.05-27.fc25 inkscape-0.92.1-4.20170510bzr15686.fc25.1 k3d-0.8.0.6-8.fc25
kxstitch-1.2.0-9.fc25 perl-Image-SubImageFind-0.03-13.fc25 pfstools-2.0.6-3.fc25
php-pecl-imagick-3.4.3-2.fc25 psiconv-0.9.8-22.fc25 q-7.11-29.fc25 ripright-0.11-5.fc25
rss-glx-0.9.1.p-27.fc25.1 rubygem-rmagick-2.16.0-4.fc25.2 synfig-1.2.0-1.fc25.1
synfigstudio-1.2.0-5.fc25 techne-0.2.3-20.fc25
vdr-scraper2vdr-1.0.5-4.20170611git254122b.fc25 vips-8.4.4-1.fc25.1
The following builds have been pushed to Fedora 25 updates-testing
ImageMagick-6.9.9.9-1.fc25
Rex-1.5.0-2.fc25
WindowMaker-0.95.7-3.fc25.1
appstream-data-25-22.fc25
arc-theme-20170302-7.fc25
atomic-1.19.1-2.fc25
autotrace-0.31.1-49.fc25
babl-0.1.30-1.fc25
banshee-2.6.2-25.fc25
bugzilla-5.0.3-5.fc25
caja-1.18.4-2.fc25
chromium-60.0.3112.113-1.fc25
clinfo-2.2.17.08.25-1.fc25
compat-ImageMagick693-6.9.3.10-1.fc25
converseen-0.9.6.2-3.fc25
dbus-sharp-0.8.1-3.fc25
dbus-sharp-glib-0.6.0-1.fc25
dovecot-2.2.32-2.fc25
drawtiming-0.7.1-22.fc25
emacs-25.2-5.fc25
fedrepo-req-1.6.0-3.fc25
foo2zjs-0.20170412-5.fc25
gd-2.2.5-1.fc25
gdeploy-2.0.2-14.fc25
gegl03-0.3.20-1.fc25
gnome-photos-3.22.7-1.fc25
gnome-shell-extension-sustmi-3.0-15.git.e3def68.fc25
google-noto-emoji-fonts-20170827-1.fc25
gtatool-2.2.0-6.fc25
httrack-3.49.2-1.fc25
imageinfo-0.05-27.fc25
inkscape-0.92.1-4.20170510bzr15686.fc25.1
java-1.8.0-openjdk-1.8.0.144-5.b01.fc25
k3d-0.8.0.6-8.fc25
kdevelop-5.1.2-1.fc25
kdevelop-php-5.1.2-1.fc25
kdevelop-python-5.1.2-1.py3.fc25
kdevplatform-5.1.2-1.fc25
kxstitch-1.2.0-9.fc25
libgexiv2-0.10.6-1.fc25
libidn2-2.0.4-1.fc25
libjson-rpc-cpp-1.0.0-1.fc25
lshw-B.02.18-11.fc25
mame-0.189-1.fc25
mbedtls-2.6.0-1.fc25
mingw-openjpeg2-2.2.0-2.fc25
mksh-56b-1.fc25
moarvm-0.2017.08.1-1.fc25
mono-zeroconf-0.9.0-20.fc25
no-more-secrets-0.3.2-3.fc25
notify-sharp-0.4.1-0.1.20130131git28d2f65.fc25
nqp-0.0.2017.08-1.fc25
ocaml-opam-file-format-2.0.0-0.2.beta3.fc25
openjpeg2-2.2.0-2.fc25
perl-Image-SubImageFind-0.03-13.fc25
pfstools-2.0.6-3.fc25
php-7.0.23-1.fc25
php-PHPMailer-5.2.25-1.fc25
php-behat-gherkin-4.4.5-1.fc25
php-consolidation-annotated-command-2.4.13-1.fc25
php-consolidation-log-1.0.3-2.fc25
php-consolidation-output-formatters-3.1.11-1.fc25
php-dflydev-dot-access-data-1.1.0-2.fc25
php-flow-jsonpath-0.3.4-1.fc25
php-horde-Horde-Compress-2.2.1-1.fc25
php-horde-Horde-Core-2.30.2-1.fc25
php-horde-Horde-Date-2.4.1-1.fc25
php-horde-Horde-Imap-Client-2.29.15-1.fc25
php-horde-Horde-Mime-Viewer-2.2.2-1.fc25
php-latte-2.4.6-1.fc25
php-nette-application-2.4.9-1.fc25
php-nette-bootstrap-2.4.5-1.fc25
php-nette-caching-2.5.5-1.fc25
php-nette-forms-2.4.6-1.fc25
php-nette-http-2.4.7-1.fc25
php-nette-utils-2.4.8-1.fc25
php-pear-crypt-gpg-1.6.1-1.fc25
php-pecl-imagick-3.4.3-2.fc25
php-simplesamlphp-saml2_3-3.0.2-3.fc25
php-symfony-polyfill-1.5.0-1.fc25
pioneer-20170827-2.fc25
prename-1.9-4.fc25
psiconv-0.9.8-22.fc25
publicsuffix-list-20170809-1.fc25
purple-discord-0-11.20170829git9115bd2.fc25
purple-facebook-0.9.5-1.9ff9acf9fa14.fc25
python-CDDB-1.4-22.fc25
python-ansible-tower-cli-3.1.7-1.fc25
python-incremental-17.5.0-1.fc25
python-markdown-2.6.9-2.fc25
python-polib-1.0.7-9.fc25
python-treq-17.8.0-2.fc25
python3-docs-3.5.4-1.fc25
q-7.11-29.fc25
rakudo-0.2017.08-1.fc25
rebase-helper-0.10.1-1.fc25
ripright-0.11-5.fc25
rss-glx-0.9.1.p-27.fc25.1
rubygem-byebug-9.1.0-1.fc25
rubygem-rmagick-2.16.0-4.fc25.2
scap-security-guide-0.1.35-1.fc25
synfig-1.2.0-1.fc25.1
synfigstudio-1.2.0-5.fc25
techne-0.2.3-20.fc25
tintin-2.01.3-1.fc25
vdr-scraper2vdr-1.0.5-4.20170611git254122b.fc25
vips-8.4.4-1.fc25.1
waf-1.9.13-1.fc25
xen-4.7.3-4.fc25
xrootd-4.7.0-1.fc25
Details about builds:
================================================================================
ImageMagick-6.9.9.9-1.fc25 (FEDORA-2017-3a568adb31)
An X application for displaying and manipulating images
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
Rex-1.5.0-2.fc25 (FEDORA-2017-4e208a87a2)
Tool for Automation, Remote Execution and Configuration Deployment
--------------------------------------------------------------------------------
Update Information:
Upgrade to Rex 1.5.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1120788 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1120788
--------------------------------------------------------------------------------
================================================================================
WindowMaker-0.95.7-3.fc25.1 (FEDORA-2017-3a568adb31)
A fast, feature rich Window Manager
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
appstream-data-25-22.fc25 (FEDORA-2017-d027c0b6ef)
Fedora AppStream metadata
--------------------------------------------------------------------------------
Update Information:
New metadata version
--------------------------------------------------------------------------------
================================================================================
arc-theme-20170302-7.fc25 (FEDORA-2017-678c05801a)
Flat theme with transparent elements
--------------------------------------------------------------------------------
Update Information:
- Add several patches from upstream
--------------------------------------------------------------------------------
================================================================================
atomic-1.19.1-2.fc25 (FEDORA-2017-b5766e8303)
Tool for managing ProjectAtomic systems and containers
--------------------------------------------------------------------------------
Update Information:
Addition of run for system containers ---- Release new version 1.19.1
--------------------------------------------------------------------------------
================================================================================
autotrace-0.31.1-49.fc25 (FEDORA-2017-3a568adb31)
Utility for converting bitmaps to vector graphics
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
babl-0.1.30-1.fc25 (FEDORA-2017-bdc8cbade9)
A dynamic, any to any, pixel format conversion library
--------------------------------------------------------------------------------
Update Information:
Upstream bugfix and feature releases.
--------------------------------------------------------------------------------
================================================================================
banshee-2.6.2-25.fc25 (FEDORA-2017-8ccc53509f)
Easily import, manage, and play selections from your music collection
--------------------------------------------------------------------------------
Update Information:
Bring fixes from later banshee builds to Fedora 25. Fix issue where banshee
could not process podcasts with Windows encoded XML.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1409665 - Banshee cannot process podcasts whose XML has Windows end-of-line
sequences
https://bugzilla.redhat.com/show_bug.cgi?id=1409665
--------------------------------------------------------------------------------
================================================================================
bugzilla-5.0.3-5.fc25 (FEDORA-2017-4690fb6f82)
Bug tracking system
--------------------------------------------------------------------------------
Update Information:
The bugzilla package could no longer be built from source. This update overhauls
its requirements and build-requirements to correct that.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1462514 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1462514
--------------------------------------------------------------------------------
================================================================================
caja-1.18.4-2.fc25 (FEDORA-2017-86627643e4)
File manager for MATE
--------------------------------------------------------------------------------
Update Information:
- add more upstream fixes - use
https://github.com/mate-desktop/caja/pull/837 -
use
https://github.com/mate-desktop/caja/pull/838
--------------------------------------------------------------------------------
================================================================================
chromium-60.0.3112.113-1.fc25 (FEDORA-2017-c708c044e3)
A WebKit (Blink) powered web browser
--------------------------------------------------------------------------------
Update Information:
Update to 60.0.3112.113. Added support for aarch64 (except on EPEL7). ----
Update to 60.0.3112.101. Apply upstream fix for cameras reporting 0x0 resolution
formats. ---- Chromium 60. Security fix for CVE-2017-5091, CVE-2017-5092,
CVE-2017-5093, CVE-2017-5094, CVE-2017-5095, CVE-2017-5096, CVE-2017-5097,
CVE-2017-5098, CVE-2017-5099, CVE-2017-5100, CVE-2017-5101, CVE-2017-5102,
CVE-2017-5103, CVE-2017-5104, CVE-2017-7000, CVE-2017-5105, CVE-2017-5106,
CVE-2017-5107, CVE-2017-5108, CVE-2017-5109, CVE-2017-5110. New subpackage
-headless. ---- Update to 59.0.3071.115
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1475213 - CVE-2017-5110 chromium-browser: ui spoofing in payments dialog
https://bugzilla.redhat.com/show_bug.cgi?id=1475213
[ 2 ] Bug #1475212 - CVE-2017-5109 chromium-browser: ui spoofing in browser
https://bugzilla.redhat.com/show_bug.cgi?id=1475212
[ 3 ] Bug #1475211 - CVE-2017-5108 chromium-browser: type confusion in pdfium
https://bugzilla.redhat.com/show_bug.cgi?id=1475211
[ 4 ] Bug #1475210 - CVE-2017-5107 chromium-browser: user information leak via svg
https://bugzilla.redhat.com/show_bug.cgi?id=1475210
[ 5 ] Bug #1475209 - CVE-2017-5106 chromium-browser: url spoofing in omnibox
https://bugzilla.redhat.com/show_bug.cgi?id=1475209
[ 6 ] Bug #1475208 - CVE-2017-5105 chromium-browser: url spoofing in omnibox
https://bugzilla.redhat.com/show_bug.cgi?id=1475208
[ 7 ] Bug #1475207 - CVE-2017-7000 chromium-browser: pointer disclosure in sqlite
https://bugzilla.redhat.com/show_bug.cgi?id=1475207
[ 8 ] Bug #1475206 - CVE-2017-5104 chromium-browser: ui spoofing in browser
https://bugzilla.redhat.com/show_bug.cgi?id=1475206
[ 9 ] Bug #1475205 - CVE-2017-5103 chromium-browser: uninitialized use in skia
https://bugzilla.redhat.com/show_bug.cgi?id=1475205
[ 10 ] Bug #1475204 - CVE-2017-5102 chromium-browser: uninitialized use in skia
https://bugzilla.redhat.com/show_bug.cgi?id=1475204
[ 11 ] Bug #1475203 - CVE-2017-5101 chromium-browser: url spoofing in omnibox
https://bugzilla.redhat.com/show_bug.cgi?id=1475203
[ 12 ] Bug #1475202 - CVE-2017-5100 chromium-browser: use after free in chrome apps
https://bugzilla.redhat.com/show_bug.cgi?id=1475202
[ 13 ] Bug #1475201 - CVE-2017-5099 chromium-browser: out-of-bounds write in ppapi
https://bugzilla.redhat.com/show_bug.cgi?id=1475201
[ 14 ] Bug #1475200 - CVE-2017-5098 chromium-browser: use after free in v8
https://bugzilla.redhat.com/show_bug.cgi?id=1475200
[ 15 ] Bug #1475199 - CVE-2017-5097 chromium-browser: out-of-bounds read in skia
https://bugzilla.redhat.com/show_bug.cgi?id=1475199
[ 16 ] Bug #1475198 - CVE-2017-5096 chromium-browser: user information leak via android
intents
https://bugzilla.redhat.com/show_bug.cgi?id=1475198
[ 17 ] Bug #1475197 - CVE-2017-5095 chromium-browser: out-of-bounds write in pdfium
https://bugzilla.redhat.com/show_bug.cgi?id=1475197
[ 18 ] Bug #1475196 - CVE-2017-5094 chromium-browser: type confusion in extensions
https://bugzilla.redhat.com/show_bug.cgi?id=1475196
[ 19 ] Bug #1475195 - CVE-2017-5093 chromium-browser: ui spoofing in blink
https://bugzilla.redhat.com/show_bug.cgi?id=1475195
[ 20 ] Bug #1475194 - CVE-2017-5092 chromium-browser: use after free in ppapi
https://bugzilla.redhat.com/show_bug.cgi?id=1475194
[ 21 ] Bug #1475193 - CVE-2017-5091 chromium-browser: use after free in indexeddb
https://bugzilla.redhat.com/show_bug.cgi?id=1475193
--------------------------------------------------------------------------------
================================================================================
clinfo-2.2.17.08.25-1.fc25 (FEDORA-2017-00f65d1047)
Enumerate OpenCL platforms and devices
--------------------------------------------------------------------------------
Update Information:
Update to latest release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1486723 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1486723
--------------------------------------------------------------------------------
================================================================================
compat-ImageMagick693-6.9.3.10-1.fc25 (FEDORA-2017-f79e0c7cc4)
Compat package with ImageMagick 6.9.3 libraries
--------------------------------------------------------------------------------
Update Information:
ImageMagick 6.9.3 ABI compatibility package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1485869 - Review Request: compat-ImageMagick693 - Compat package with
ImageMagick 6.9.3 libraries
https://bugzilla.redhat.com/show_bug.cgi?id=1485869
--------------------------------------------------------------------------------
================================================================================
converseen-0.9.6.2-3.fc25 (FEDORA-2017-3a568adb31)
A batch image conversion tool written in C++ with Qt5 and Magick++
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
dbus-sharp-0.8.1-3.fc25 (FEDORA-2017-8ccc53509f)
C# bindings for D-Bus
--------------------------------------------------------------------------------
Update Information:
Bring fixes from later banshee builds to Fedora 25. Fix issue where banshee
could not process podcasts with Windows encoded XML.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1409665 - Banshee cannot process podcasts whose XML has Windows end-of-line
sequences
https://bugzilla.redhat.com/show_bug.cgi?id=1409665
--------------------------------------------------------------------------------
================================================================================
dbus-sharp-glib-0.6.0-1.fc25 (FEDORA-2017-8ccc53509f)
C# bindings for D-Bus glib main loop integration
--------------------------------------------------------------------------------
Update Information:
Bring fixes from later banshee builds to Fedora 25. Fix issue where banshee
could not process podcasts with Windows encoded XML.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1409665 - Banshee cannot process podcasts whose XML has Windows end-of-line
sequences
https://bugzilla.redhat.com/show_bug.cgi?id=1409665
--------------------------------------------------------------------------------
================================================================================
dovecot-2.2.32-2.fc25 (FEDORA-2017-18b23298f4)
Secure imap and pop3 server
--------------------------------------------------------------------------------
Update Information:
- dovecot updated to 2.2.32 - pigeonhole updated to 0.4.20 - Made the retention
period for redirect duplicate identifiers configurable. Changed the default
retention period from 24 to 12 hours. - sieve-filter: Fixed memory leak: forgot
to clean up script binary at end of execution - managesieve-login: Fixed
handling of AUTHENTICATE command. A second authenticate command would be parsed
wrong. - Modseq tracking didn't always work correctly. This could have caused
imap unhibernation to fail or IMAP QRESYNC/CONDSTORE extensions to not work
perfectly. - mdbox: "Inconsistency in map index" wasn't fixed automatically
-
dict-ldap: %variable values used in the LDAP filter weren't escaped. -
quota=count: quota_warning = -storage=.. was never executed (try #2). - imapc:
= 32 kB mail bodies were supposed to be cached for subsequent
FETCHes, but
weren't. - quota-status service didn't support
recipient_delimiter - acl: Don't
access dovecot-acl-list files with acl_globals_only=yes - mail_location: If
INDEX dir is set, mailbox deletion deletes its childrens' indexes. - director:
v2.2.31 caused rapid reconnection loops to directors that were down.
--------------------------------------------------------------------------------
================================================================================
drawtiming-0.7.1-22.fc25 (FEDORA-2017-3a568adb31)
A command line tool for generating timing diagrams
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
emacs-25.2-5.fc25 (FEDORA-2017-3a568adb31)
GNU Emacs text editor
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
fedrepo-req-1.6.0-3.fc25 (FEDORA-2017-a4a6724cd1)
CLI for Fedora package repo requests
--------------------------------------------------------------------------------
Update Information:
Fixes an issue when using a version of python-bugzilla below 2.0. ---- * Fixed
a bug when requesting a new module repo * Improve the logic that determines the
FAS user from a Bugzilla email address (this is used to determine if the user
approving the Bugzilla ticket is a packager) * Fixed a bug when a user requested
a new repo with the "Fedora EPEL" product selected on their Bugzilla ticket *
Slight improvements to the documentation ---- Changes: * Set the user agent
string to "fedrepo-req/version" * Add a way to skip Bugzilla ticket validation
in fedrepo-req-admin * Explain when a user can't be found in FAS * Don't use the
Bugzilla authentication cache on fedrepo-req * Change requirements from "git"
to
"git-core" ---- Updates to v1.4.0. The client tool is mostly unchanged
except
that it has a few usability improvements such as having a man page and telling
users to read the README if they haven't configured the client tool. The admin
tool has a few enhancements and bug fixes that are listed in git. ---- Bumps
to version 1.3.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1481036 - Requesting new repo errors with meaningless error message
https://bugzilla.redhat.com/show_bug.cgi?id=1481036
[ 2 ] Bug #1471897 - fedrepo-req: Switch to Python 3
https://bugzilla.redhat.com/show_bug.cgi?id=1471897
[ 3 ] Bug #1482575 - fedrepo-req: change requires from git to git-core
https://bugzilla.redhat.com/show_bug.cgi?id=1482575
--------------------------------------------------------------------------------
================================================================================
foo2zjs-0.20170412-5.fc25 (FEDORA-2017-73df7ae52a)
Linux printer driver for ZjStream protocol
--------------------------------------------------------------------------------
Update Information:
Remove ICC and firmware files due to licensing
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1486204 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1486204
--------------------------------------------------------------------------------
================================================================================
gd-2.2.5-1.fc25 (FEDORA-2017-a69b0bb52d)
A graphics library for quick creation of PNG or JPEG images
--------------------------------------------------------------------------------
Update Information:
**Version 2.2.5** - 2017-08-30 * **Security** - Double-free in
gdImagePngPtr(). **CVE-2017-6362** - Buffer over-read into uninitialized
memory. **CVE-2017-7890** * **Fixed** - Fix #109: XBM reading fails with
printed error - Fix #338: Fatal and normal libjpeg/ibpng errors not
distinguishable - Fix #357: 2.2.4: Segfault in test suite - Fix #386:
gdImageGrayScale() may produce colors - Fix #406: webpng -i removes the
transparent color - Fix Coverity #155475: Failure to restore
alphaBlendingFlag - Fix Coverity #155476: potential resource leak - Fix
several build issues and test failures - Fix and reenable optimized support
for reading 1 bps TIFFs
--------------------------------------------------------------------------------
================================================================================
gdeploy-2.0.2-14.fc25 (FEDORA-2017-948d6d6dfc)
Tool to deploy and manage GlusterFS cluster
--------------------------------------------------------------------------------
Update Information:
New package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1344276 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1344276
--------------------------------------------------------------------------------
================================================================================
gegl03-0.3.20-1.fc25 (FEDORA-2017-bdc8cbade9)
Graph based image processing framework
--------------------------------------------------------------------------------
Update Information:
Upstream bugfix and feature releases.
--------------------------------------------------------------------------------
================================================================================
gnome-photos-3.22.7-1.fc25 (FEDORA-2017-bdc8cbade9)
Access, organize and share your photos on GNOME
--------------------------------------------------------------------------------
Update Information:
Upstream bugfix and feature releases.
--------------------------------------------------------------------------------
================================================================================
gnome-shell-extension-sustmi-3.0-15.git.e3def68.fc25 (FEDORA-2017-3faa8463a3)
Include two extensions, windowoverlay-icons and historymanager-prefix-search
--------------------------------------------------------------------------------
Update Information:
First update in years. (Previous package maintainer had disappeared.) This is
two GNOME Shell extensions in subpackages, because the upstream tracks them both
in a single git repository. Upstream changes since the last package update
include: * updates to keep up with changes to the GNOME Shell API (from
relatively early in the GNOME 3.x life cycle) * additional translations *
various bug fixes
--------------------------------------------------------------------------------
================================================================================
google-noto-emoji-fonts-20170827-1.fc25 (FEDORA-2017-91d4028ee0)
Google Noto Emoji Fonts
--------------------------------------------------------------------------------
Update Information:
Update to upstream snapshot tarball
--------------------------------------------------------------------------------
================================================================================
gtatool-2.2.0-6.fc25 (FEDORA-2017-3a568adb31)
Commandline tool to manipulate GTAs
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
httrack-3.49.2-1.fc25 (FEDORA-2017-752be5c757)
Website copier and offline browser
--------------------------------------------------------------------------------
Update Information:
update
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1423723 - httrack: FTBFS in rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1423723
[ 2 ] Bug #1438201 - httrack-3.49.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1438201
--------------------------------------------------------------------------------
================================================================================
imageinfo-0.05-27.fc25 (FEDORA-2017-3a568adb31)
Extract attributes of digital images
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
inkscape-0.92.1-4.20170510bzr15686.fc25.1 (FEDORA-2017-3a568adb31)
Vector-based drawing program using SVG
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
java-1.8.0-openjdk-1.8.0.144-5.b01.fc25 (FEDORA-2017-341e902f14)
OpenJDK Runtime Environment
--------------------------------------------------------------------------------
Update Information:
fixed few minor bugs (eg dangling symlinks), updated to u 144 (fixing zi[p
regression)
--------------------------------------------------------------------------------
================================================================================
k3d-0.8.0.6-8.fc25 (FEDORA-2017-3a568adb31)
A 3D Modeling, Animation and Rendering System
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
kdevelop-5.1.2-1.fc25 (FEDORA-2017-33521c3bfb)
Integrated Development Environment for C++/C
--------------------------------------------------------------------------------
Update Information:
KDevelop 5.1.2 release. See
https://www.kdevelop.org/news/kdevelop-512-released
for more information.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1486081 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1486081
--------------------------------------------------------------------------------
================================================================================
kdevelop-php-5.1.2-1.fc25 (FEDORA-2017-33521c3bfb)
Php language and documentation plugins for KDevelop
--------------------------------------------------------------------------------
Update Information:
KDevelop 5.1.2 release. See
https://www.kdevelop.org/news/kdevelop-512-released
for more information.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1486081 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1486081
--------------------------------------------------------------------------------
================================================================================
kdevelop-python-5.1.2-1.py3.fc25 (FEDORA-2017-33521c3bfb)
Python 3 Plugin for KDevelop
--------------------------------------------------------------------------------
Update Information:
KDevelop 5.1.2 release. See
https://www.kdevelop.org/news/kdevelop-512-released
for more information.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1486081 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1486081
--------------------------------------------------------------------------------
================================================================================
kdevplatform-5.1.2-1.fc25 (FEDORA-2017-33521c3bfb)
Libraries for use by KDE development tools
--------------------------------------------------------------------------------
Update Information:
KDevelop 5.1.2 release. See
https://www.kdevelop.org/news/kdevelop-512-released
for more information.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1486081 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1486081
--------------------------------------------------------------------------------
================================================================================
kxstitch-1.2.0-9.fc25 (FEDORA-2017-3a568adb31)
Program to create cross stitch patterns
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
libgexiv2-0.10.6-1.fc25 (FEDORA-2017-e269c886d0)
Gexiv2 is a GObject-based wrapper around the Exiv2 library
--------------------------------------------------------------------------------
Update Information:
gexiv2 0.10.6 release. * Fix missing include file * Add a function to save
meta-data in XMP sidecar file * Add a more complete Python test-suite * Fix a
potential NULL dereference in _get_comment() * Fix compatibility with Exiv2 0.26
--------------------------------------------------------------------------------
================================================================================
libidn2-2.0.4-1.fc25 (FEDORA-2017-57722ccd30)
Library to support IDNA2008 internationalized domain names
--------------------------------------------------------------------------------
Update Information:
Libidn2 2.0.4 (released 2017-08-30) =================================== * Fix
integer overflow in bidi.c/_isBidi() * Fix integer overflow in
puny_decode.c/decode_digit() * Improve docs * Fix idna_free() to idn_free()
* Update fuzzer corpora
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1486882 - libidn2: in puny_decode.c/decode_digit
https://bugzilla.redhat.com/show_bug.cgi?id=1486882
[ 2 ] Bug #1486881 - libidn2: integer overflow in bidi.c/_isBidi()
https://bugzilla.redhat.com/show_bug.cgi?id=1486881
--------------------------------------------------------------------------------
================================================================================
libjson-rpc-cpp-1.0.0-1.fc25 (FEDORA-2017-6e231e21e7)
C++ framework for json-rpc (json remote procedure call)
--------------------------------------------------------------------------------
Update Information:
## Fixed - Typo in ERROR_CLIENT_CONNECTOR exception - Integration testsuite
when run without HTTP - Positional parameters with more than 10 items - C++11
deprecated dynamic excpetion specifiers have been removed - libmicrohttpd legacy
detection for `EPOLL` ## Added - File descriptor client and server connector -
Redis client and server connector - `StreamReader` and `StreamWriter` classes to
handle the buffering ## Removed - Method
`BatchResponse::getResult(Json::Value& id)` - Method
`AbstractServerConnector::SendResponse()` ## Changed - Use libmicrohttpd's
EPOLL where possible (lmhd >= 0.9.52) - Refactored all socket-based client and
server connectors to reduce code duplication - Changed interfaces for
`AbstractServerConnector` to avoid the ugly `void *` backpointer
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1485748 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1485748
--------------------------------------------------------------------------------
================================================================================
lshw-B.02.18-11.fc25 (FEDORA-2017-451fd53d2a)
Hardware lister
--------------------------------------------------------------------------------
Update Information:
Various changes to let lshw show up in GNOME Software.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1476498 - AppStream metadata for lshw gui package are missing
https://bugzilla.redhat.com/show_bug.cgi?id=1476498
--------------------------------------------------------------------------------
================================================================================
mame-0.189-1.fc25 (FEDORA-2017-004a3c2147)
Multiple Arcade Machine Emulator
--------------------------------------------------------------------------------
Update Information:
An update to the latest mame release: *
http://mamedev.org/?p=447
--------------------------------------------------------------------------------
================================================================================
mbedtls-2.6.0-1.fc25 (FEDORA-2017-3abea58794)
Light-weight cryptographic and SSL/TLS library
--------------------------------------------------------------------------------
Update Information:
- Update to 2.6.0 Release notes:
https://tls.mbed.org/tech-
updates/releases/mbedtls-2.6.0-2.1.9-and-1.3.21-released Security Advisory:
https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-
advisory-2017-02
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1487120 - CVE-2017-14032 mbedtls: Bypass peer authentication
https://bugzilla.redhat.com/show_bug.cgi?id=1487120
--------------------------------------------------------------------------------
================================================================================
mingw-openjpeg2-2.2.0-2.fc25 (FEDORA-2017-deefb26e8b)
MinGW Windows openjpeg2 library
--------------------------------------------------------------------------------
Update Information:
This update fixes CVE-2017-12982.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1487236 - CVE-2017-12982 openjpeg: Memory allocation failure in the
opj_image_create function
https://bugzilla.redhat.com/show_bug.cgi?id=1487236
--------------------------------------------------------------------------------
================================================================================
mksh-56b-1.fc25 (FEDORA-2017-a8f0c28fe4)
MirBSD enhanced version of the Korn Shell
--------------------------------------------------------------------------------
Update Information:
mksh R56b ========= * Reference the FAQ webpage * Fix documentation bug
wrt. Esc+Ctrl-L * Fix ���0��� movement in vi mode * Replace broken libcs���
offsetof macro with MirBSD���s
--------------------------------------------------------------------------------
================================================================================
moarvm-0.2017.08.1-1.fc25 (FEDORA-2017-b42ee332f3)
Meta-model On A Runtime Virtual Machine
--------------------------------------------------------------------------------
Update Information:
update to 2017.08
--------------------------------------------------------------------------------
================================================================================
mono-zeroconf-0.9.0-20.fc25 (FEDORA-2017-8ccc53509f)
Mono.Zeroconf networking library
--------------------------------------------------------------------------------
Update Information:
Bring fixes from later banshee builds to Fedora 25. Fix issue where banshee
could not process podcasts with Windows encoded XML.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1409665 - Banshee cannot process podcasts whose XML has Windows end-of-line
sequences
https://bugzilla.redhat.com/show_bug.cgi?id=1409665
--------------------------------------------------------------------------------
================================================================================
no-more-secrets-0.3.2-3.fc25 (FEDORA-2017-b50c986306)
A recreation of the "decrypting text" effect from the 1992 movie Sneakers
--------------------------------------------------------------------------------
Update Information:
update for chnages suggested in RHBZ#1484222
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1484222 - Review Request: no-more-secrets - A recreation of the
"decrypting text" effect from the 1992 movie Sneakers
https://bugzilla.redhat.com/show_bug.cgi?id=1484222
--------------------------------------------------------------------------------
================================================================================
notify-sharp-0.4.1-0.1.20130131git28d2f65.fc25 (FEDORA-2017-8ccc53509f)
A C# implementation for Desktop Notifications
--------------------------------------------------------------------------------
Update Information:
Bring fixes from later banshee builds to Fedora 25. Fix issue where banshee
could not process podcasts with Windows encoded XML.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1409665 - Banshee cannot process podcasts whose XML has Windows end-of-line
sequences
https://bugzilla.redhat.com/show_bug.cgi?id=1409665
--------------------------------------------------------------------------------
================================================================================
nqp-0.0.2017.08-1.fc25 (FEDORA-2017-b42ee332f3)
Not Quite Perl (6)
--------------------------------------------------------------------------------
Update Information:
update to 2017.08
--------------------------------------------------------------------------------
================================================================================
ocaml-opam-file-format-2.0.0-0.2.beta3.fc25 (FEDORA-2017-5c995bff3a)
Parser and printer for the opam file syntax
--------------------------------------------------------------------------------
Update Information:
Parser and printer for the opam file syntax
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1477362 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1477362
--------------------------------------------------------------------------------
================================================================================
openjpeg2-2.2.0-2.fc25 (FEDORA-2017-deefb26e8b)
C-Library for JPEG 2000
--------------------------------------------------------------------------------
Update Information:
This update fixes CVE-2017-12982.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1487236 - CVE-2017-12982 openjpeg: Memory allocation failure in the
opj_image_create function
https://bugzilla.redhat.com/show_bug.cgi?id=1487236
--------------------------------------------------------------------------------
================================================================================
perl-Image-SubImageFind-0.03-13.fc25 (FEDORA-2017-3a568adb31)
Perl extension for locating a sub-image within an image
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
pfstools-2.0.6-3.fc25 (FEDORA-2017-3a568adb31)
Programs for handling high-dynamic range images
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
php-7.0.23-1.fc25 (FEDORA-2017-778af43856)
PHP scripting language for creating dynamic web sites
--------------------------------------------------------------------------------
Update Information:
**PHP version 7.0.23** (31 Aug 2017) **Core:** * Fixed bug php#74947 (Segfault
in scanner on INF number). (Laruence) * Fixed bug php#74954 (null deref and
segfault in zend_generator_resume()). (Bob) * Fixed bug php#74725 (html_errors=1
breaks unhandled exceptions). (Andrea) **Date:** * Fixed bug��php#75002 (Null
Pointer Dereference in timelib_time_clone). (Derick) **Intl:** * Fixed bug
php#74993 (Wrong reflection on some locale_* functions). (Sara) **Mbstring:**
* Fixed bug php#71606 (Segmentation fault mb_strcut with HTML-ENTITIES
encoding). (cmb) * Fixed bug php#62934 (mb_convert_kana() does not convert
iteration marks). (Nikita) * Fixed bug php#75001 (Wrong reflection on
mb_eregi_replace). (Fabien Villepinte) **MySQLi:** * Fixed bug php#74968 (PHP
crashes when calling mysqli_result::fetch_object with an abstract class).
(Anatol) **phar:** * Fixed bug php#74991 (include_path has a 4096 char limit
in some cases). (bwbroersma) **Reflection:** * Fixed bug php#74949 (null
pointer dereference in _function_string). (Laruence) **Session:** * Fixed bug
php#74833 (SID constant created with wrong module number). (Anatol)
**SimpleXML:** * Fixed bug php#74950 (nullpointer deref in
simplexml_element_getDocNamespaces). (Laruence) **SPL:** * Fixed bug php#75049
(spl_autoload_unregister can't handle spl_autoload_functions results).
(Laruence) * Fixed bug php#74669 (Unserialize ArrayIterator broken). (Andrew
Nester) * Fixed bug php#75015 (Crash in recursive iterator destructors).
(Julien) **Standard:** * Fixed bug php#75075 (unpack with X* causes infinity
loop). (Laruence) * Fixed bug php#74103 (heap-use-after-free when unserializing
invalid array size). (Nikita) * Fixed bug php#75054 (A Denial of Service
Vulnerability was found when performing deserialization). (Nikita) **WDDX:** *
Fixed bug php#73793 (WDDX uses wrong decimal seperator). (cmb) **XMLRPC:** *
Fixed bug php#74975 (Incorrect xmlrpc serialization for classes with declared
properties). (blar)
--------------------------------------------------------------------------------
================================================================================
php-PHPMailer-5.2.25-1.fc25 (FEDORA-2017-f5bdecf4ef)
PHP email transport class with a lot of features
--------------------------------------------------------------------------------
Update Information:
**Version 5.2.25** (August 28th 2017) * Make obtaining SMTP transaction ID more
reliable * Add Bosnian translation * This is the last official release in the
legacy PHPMailer 5.2 series; there may be future security patches (which will be
found in the [5.2-stable
branch](https://github.com/PHPMailer/PHPMailer/tree/5.2-stable)), but no further
non-security PRs or issues will be accepted. Migrate to PHPMailer 6.0.
--------------------------------------------------------------------------------
================================================================================
php-behat-gherkin-4.4.5-1.fc25 (FEDORA-2017-b1210ff7f2)
Gherkin DSL parser for PHP
--------------------------------------------------------------------------------
Update Information:
Gherkin DSL parser for PHP. Autoloader:
`/usr/share/php/Behat/Gherkin/autoload.php`
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1483372 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1483372
--------------------------------------------------------------------------------
================================================================================
php-consolidation-annotated-command-2.4.13-1.fc25 (FEDORA-2017-7aa639b853)
Initialize Symfony Console commands from annotated command class methods
--------------------------------------------------------------------------------
Update Information:
### 2.4.13 - Add a followLinks() method. ### 2.4.12 - BUGFIX: Allow annotated
commands to directly use InputInterface and OutputInterface (#106)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1485331 - php-consolidation-annotated-command-2.4.13 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1485331
--------------------------------------------------------------------------------
================================================================================
php-consolidation-log-1.0.3-2.fc25 (FEDORA-2017-c661b92fa9)
Improved Psr-3 / Psr\\Log logger based on Symfony Console components
--------------------------------------------------------------------------------
Update Information:
Consolidation\Log provides a Psr-3 compatible logger that provides styled log
output to the standard error (stderr) stream. By default, styling is provided by
the SymfonyStyle class from the Symfony Console component; however, alternative
stylers may be provided if desired. Autoloader:
`/usr/share/php/Consolidation/Log/autoload.php`
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1483375 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1483375
--------------------------------------------------------------------------------
================================================================================
php-consolidation-output-formatters-3.1.11-1.fc25 (FEDORA-2017-7a895e83b6)
Format text by applying transformations provided by plug-in formatters
--------------------------------------------------------------------------------
Update Information:
## 3.1.11 Provide a ListDataFromKeys data type.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1482728 - php-consolidation-output-formatters-3.1.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1482728
--------------------------------------------------------------------------------
================================================================================
php-dflydev-dot-access-data-1.1.0-2.fc25 (FEDORA-2017-69397e0447)
Given a deep data structure, access data by dot notation
--------------------------------------------------------------------------------
Update Information:
Given a deep data structure, access data by dot notation. Autoloader:
`/usr/share/php/Dflydev/DotAccessData/autoload.php`
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1483376 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1483376
--------------------------------------------------------------------------------
================================================================================
php-flow-jsonpath-0.3.4-1.fc25 (FEDORA-2017-2b91b76e82)
JSONPath implementation for parsing, searching and flattening arrays
--------------------------------------------------------------------------------
Update Information:
This is a JSONPath [1] implementation for PHP based on Stefan Goessner's
JSONPath script. JSONPath is an XPath-like expression language for filtering,
flattening and extracting data. I believe that is improves on the original
script (which was last updated in 2007) by doing a few things: * Object-
oriented code (should be easier to manage or extend in future) * Expressions are
parsed into tokens using some code cribbed from Doctrine Lexer and cached *
There is no eval() in use * Performance is pretty much the same * Any
combination of objects/arrays/ArrayAccess-objects can be used as the data
input which is great if you're de-serializing JSON in to objects or if you
want to process your own data structures. Autoloader:
`/usr/share/php/Flow/JSONPath/autoload.php` [1]
http://goessner.net/articles/JsonPath/
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1483381 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1483381
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Compress-2.2.1-1.fc25 (FEDORA-2017-3123c9407c)
Horde Compression API
--------------------------------------------------------------------------------
Update Information:
**Horde_Compress 2.2.1** * [jan] Fix RAR compressed file names with unicode
characters.
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Core-2.30.2-1.fc25 (FEDORA-2017-dce7db46f4)
Horde Core Framework libraries
--------------------------------------------------------------------------------
Update Information:
**Horde_Core 2.30.2** * [jan] Fix double line breaks in task description
tooltips (Bug #14684). ---- **Horde_Core 2.30.1** * [mjr] Fix issue that
could break ActiveSync sync if object not found.
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Date-2.4.1-1.fc25 (FEDORA-2017-033bb0a38b)
Horde Date package
--------------------------------------------------------------------------------
Update Information:
**Horde_Date 2.4.1** * [jan] Fix translating the string representation of a
recurrence rule.
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Imap-Client-2.29.15-1.fc25 (FEDORA-2017-48a674f91c)
Horde IMAP abstraction interface
--------------------------------------------------------------------------------
Update Information:
**Horde_Imap_Client 2.29.15** * [jan] Fix expunging cache entries of a certain
lifetime from the DB backend.
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Mime-Viewer-2.2.2-1.fc25 (FEDORA-2017-169b8b0dac)
Horde MIME Viewer Library
--------------------------------------------------------------------------------
Update Information:
**Horde_Mime_Viewer 2.2.2** * [jan] Fix bottom table line length of RAR archive
summaries.
--------------------------------------------------------------------------------
================================================================================
php-latte-2.4.6-1.fc25 (FEDORA-2017-a1014a68e1)
Latte: the amazing template engine for PHP
--------------------------------------------------------------------------------
Update Information:
**Released version 2.4.6** * Engine: better error message when is unable to
create file * Engine: throws exception when is unable to create directory *
Parser: expands <script /> to <script></script> #164 * added
|webalize
(requires nette/utils) * added |reverse
--------------------------------------------------------------------------------
================================================================================
php-nette-application-2.4.9-1.fc25 (FEDORA-2017-3cb0c20bde)
Nette Application MVC Component
--------------------------------------------------------------------------------
Update Information:
**Released version 2.4.9** * Route: converts all scalar params to strings
#185 * Route: fixed handling of required parameters with default value *
ComponentReflection: 'sinces' are stored only for presenters, refactoring *
Control: enhanced code completion for $template (#184) *
Component::saveState() fixed compatibility with PHP 7.2
--------------------------------------------------------------------------------
================================================================================
php-nette-bootstrap-2.4.5-1.fc25 (FEDORA-2017-8de6a7b80a)
Nette Bootstrap
--------------------------------------------------------------------------------
Update Information:
**Released version 2.4.5** * detectDebugMode() check for Forwarded header
existence (#55) * Configurator:getCacheDirectory() throws exception when is
unable to create directory
--------------------------------------------------------------------------------
================================================================================
php-nette-caching-2.5.5-1.fc25 (FEDORA-2017-dc8af9e3e3)
Nette Caching Component
--------------------------------------------------------------------------------
Update Information:
**Released version 2.5.5** * added Cache::NAMESPACES and support for
cleaning namespace in FileStorage #52 * CacheExtension: throws exception when
is unable to create directory
--------------------------------------------------------------------------------
================================================================================
php-nette-forms-2.4.6-1.fc25 (FEDORA-2017-ad2558dde9)
Nette Forms: greatly facilitates web forms
--------------------------------------------------------------------------------
Update Information:
**Released version 2.4.6** * addError() by default translates messages (BC
break) * Revert "DefaultFormRenderer: added error message translation
(#145)"
#162 (introduced in v2.4.4) * FormMacros: fix edcompatibility between n:class
macro and n:name form macro. (#159) * added Form::reset()
--------------------------------------------------------------------------------
================================================================================
php-nette-http-2.4.7-1.fc25 (FEDORA-2017-b537694329)
Nette HTTP Component
--------------------------------------------------------------------------------
Update Information:
**Released version 2.4.7** * FileUpload: uses FileSystem * silenced
each() deprecation notice in PHP 7.2
--------------------------------------------------------------------------------
================================================================================
php-nette-utils-2.4.8-1.fc25 (FEDORA-2017-e9db52e4e5)
Nette Utility Classes
--------------------------------------------------------------------------------
Update Information:
**Released version 2.4.8** * Html: accepts IHtmlString nette/forms#160 *
Html::addText() accepts Html as setText() does * Reflection: added support
for PHP 7.2 type 'object' * ArrayList: triggers notice when indexes are not
integers * travis: compatible with PHP 7.2
--------------------------------------------------------------------------------
================================================================================
php-pear-crypt-gpg-1.6.1-1.fc25 (FEDORA-2017-62b0c34128)
GNU Privacy Guard (GnuPG)
--------------------------------------------------------------------------------
Update Information:
**Version 1.6.1** * Fix Bug pear#21237: Use --skip-verify in decrypt() method *
Update list of hash algorithm names * Add option to ignore signature
verification errors on decrypt.
--------------------------------------------------------------------------------
================================================================================
php-pecl-imagick-3.4.3-2.fc25 (FEDORA-2017-3a568adb31)
Provides a wrapper to the ImageMagick library
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
php-simplesamlphp-saml2_3-3.0.2-3.fc25 (FEDORA-2017-852dc3f8f2)
SAML2 PHP library from SimpleSAMLphp (version 3)
--------------------------------------------------------------------------------
Update Information:
A PHP library for SAML2 related functionality. Extracted from SimpleSAMLphp [1],
used by OpenConext [2]. This library started as a collaboration between UNINETT
[3] and SURFnet [4] but everyone is invited to contribute. Autoloader:
`/usr/share/php/SAML2_3/autoload.php` [1]
https://www.simplesamlphp.org/ [2]
https://www.openconext.org/ [3]
https://www.uninett.no/ [4]
https://www.surfnet.nl/
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1470448 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1470448
--------------------------------------------------------------------------------
================================================================================
php-symfony-polyfill-1.5.0-1.fc25 (FEDORA-2017-1ca17482dd)
Symfony polyfills backporting features to lower PHP versions
--------------------------------------------------------------------------------
Update Information:
## v1.5.0 * added polyfill for spl_object_id() * fixed apcu function when apc
ones are polyfilled with Zend Server's Data Cache * added `PHP_OS_FAMILY`
polyfill
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1482156 - php-symfony-polyfill-1.5.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1482156
--------------------------------------------------------------------------------
================================================================================
pioneer-20170827-2.fc25 (FEDORA-2017-b44236ee1b)
A game of lonely space adventure
--------------------------------------------------------------------------------
Update Information:
- Exclude stripping of PNG files (bz#1486399) ---- - Update to 20170827
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1486399 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1486399
--------------------------------------------------------------------------------
================================================================================
prename-1.9-4.fc25 (FEDORA-2017-0671f3e812)
Perl script to rename multiple files
--------------------------------------------------------------------------------
Update Information:
Added LICENSE from upstream
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1482997 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1482997
--------------------------------------------------------------------------------
================================================================================
psiconv-0.9.8-22.fc25 (FEDORA-2017-3a568adb31)
A conversion utility for Psion files
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
publicsuffix-list-20170809-1.fc25 (FEDORA-2017-c4ab9b29f2)
Cross-vendor public domain suffix database
--------------------------------------------------------------------------------
Update Information:
Recent revision - 20170809
--------------------------------------------------------------------------------
================================================================================
purple-discord-0-11.20170829git9115bd2.fc25 (FEDORA-2017-ea0be17205)
Discord plugin for libpurple
--------------------------------------------------------------------------------
Update Information:
Updated to latest snapshot. ---- Updated to latest snapshot.
--------------------------------------------------------------------------------
================================================================================
purple-facebook-0.9.5-1.9ff9acf9fa14.fc25 (FEDORA-2017-2590c3c9b8)
Facebook protocol plugin for purple2
--------------------------------------------------------------------------------
Update Information:
- New upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1487200 - purple-facebook-0.9.5-9ff9acf9fa14 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1487200
--------------------------------------------------------------------------------
================================================================================
python-CDDB-1.4-22.fc25 (FEDORA-2017-2bcca67296)
CDDB and FreeDB audio CD track info access in Python
--------------------------------------------------------------------------------
Update Information:
- Python 2 binary package renamed to python2-cddb - Properly rename the package
- Update to recent macros and guidelines - Drop obsolete stuff
--------------------------------------------------------------------------------
================================================================================
python-ansible-tower-cli-3.1.7-1.fc25 (FEDORA-2017-9a800dcd6f)
A CLI tool for Ansible Tower
--------------------------------------------------------------------------------
Update Information:
bugfix
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1470429 - python-ansible-tower-cli-v3.1.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1470429
--------------------------------------------------------------------------------
================================================================================
python-incremental-17.5.0-1.fc25 (FEDORA-2017-c96acd632d)
It versions your Python projects
--------------------------------------------------------------------------------
Update Information:
Initial package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1484331 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1484331
--------------------------------------------------------------------------------
================================================================================
python-markdown-2.6.9-2.fc25 (FEDORA-2017-8356fc7413)
Markdown implementation in Python
--------------------------------------------------------------------------------
Update Information:
Update Python-Markdown to 2.6.9, a bug-fix release.
--------------------------------------------------------------------------------
================================================================================
python-polib-1.0.7-9.fc25 (FEDORA-2017-3284d5dc04)
A library to parse and manage gettext catalogs
--------------------------------------------------------------------------------
Update Information:
- Several improvements for Fedora and EPEL - Package must be noarch
--------------------------------------------------------------------------------
================================================================================
python-treq-17.8.0-2.fc25 (FEDORA-2017-45c989fc7b)
A requests-like API built on top of twisted.web's Agent
--------------------------------------------------------------------------------
Update Information:
Enabled Doc build, Fix BR Issues and some nit picks
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1484350 - Review Request: python-treq - A requests-like API built on top of
twisted.web's Agent
https://bugzilla.redhat.com/show_bug.cgi?id=1484350
--------------------------------------------------------------------------------
================================================================================
python3-docs-3.5.4-1.fc25 (FEDORA-2017-bf2721cc81)
Documentation for the Python 3 programming language
--------------------------------------------------------------------------------
Update Information:
Update to version 3.5.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1485728 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1485728
--------------------------------------------------------------------------------
================================================================================
q-7.11-29.fc25 (FEDORA-2017-3a568adb31)
Equational programming language
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
rakudo-0.2017.08-1.fc25 (FEDORA-2017-b42ee332f3)
Perl 6 compiler implementation that runs on MoarVM
--------------------------------------------------------------------------------
Update Information:
update to 2017.08
--------------------------------------------------------------------------------
================================================================================
rebase-helper-0.10.1-1.fc25 (FEDORA-2017-7765f440fd)
The tool that helps you to rebase your package to the latest version
--------------------------------------------------------------------------------
Update Information:
News in **rebase-helper 0.10.1**: - Added `--version` argument - **Anitya**
versioneer now primarily searches for projects using Fedora mapping - Python
dependencies moved from `requirements.txt` to `setup.py` - Made
`CustomManPagesBuilder` work with Sphinx >= 1.6 - *%prep* section parser is now
able to handle backslash-split lines ---- News in **rebase-helper 0.10.0**: -
Implemented extensible SPEC hooks and versioneers - Added **PyPI** SPEC hook for
automatic fixing of Source URL of Python packages - Added **Anitya** and
**PyPI** versioneers for determining latest upstream version of a package -
Added possibility to download old version build of a package from Koji - Added
support for test suite to be run in Docker containers - Implemented functional
tests for automatic testing of whole rebase process - Diff against original
source files is now generated as *changes.patch* - Introduced plugin system for
extending build tools, checkers and output tools - Updated for **Koji 1.13**
which finally brings Python 3 support - Improved output information and reports
- Added colorized output - Improved project documentation - Pre-configured git
username and e-mail address is now used if available - Fixed several issues in
**rpmdiff** and especially **abipkgdiff** checkers - Fixed several test suite
related issues
--------------------------------------------------------------------------------
================================================================================
ripright-0.11-5.fc25 (FEDORA-2017-3a568adb31)
Minimal CD to FLAC ripper
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
rss-glx-0.9.1.p-27.fc25.1 (FEDORA-2017-3a568adb31)
Really Slick Screensavers
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
rubygem-byebug-9.1.0-1.fc25 (FEDORA-2017-aec59450cc)
Ruby 2.0 fast debugger - base + CLI
--------------------------------------------------------------------------------
Update Information:
New version 9.1.0 is released.
--------------------------------------------------------------------------------
================================================================================
rubygem-rmagick-2.16.0-4.fc25.2 (FEDORA-2017-3a568adb31)
Ruby binding to ImageMagick
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
scap-security-guide-0.1.35-1.fc25 (FEDORA-2017-b4baf93b46)
Security guidance and baselines in SCAP formats
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream SCAP-Security-Guide-0.1.35 release:
--------------------------------------------------------------------------------
================================================================================
synfig-1.2.0-1.fc25.1 (FEDORA-2017-3a568adb31)
Vector-based 2D animation rendering backend
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
synfigstudio-1.2.0-5.fc25 (FEDORA-2017-3a568adb31)
Vector-based 2D animation studio
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
techne-0.2.3-20.fc25 (FEDORA-2017-3a568adb31)
A general purpose, programmable physical simulator and renderer
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
tintin-2.01.3-1.fc25 (FEDORA-2017-7bf04fa857)
TinTin++, aka tt++, is a free MUD client
--------------------------------------------------------------------------------
Update Information:
A new version of TinTin++ is available. See
http://tintin.sourceforge.net/board/viewtopic.php?t=2486 for the summary of
changes in this release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1485914 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1485914
--------------------------------------------------------------------------------
================================================================================
vdr-scraper2vdr-1.0.5-4.20170611git254122b.fc25 (FEDORA-2017-3a568adb31)
A client plugin which provides scraped metadata from EPGD to other plugins
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
vips-8.4.4-1.fc25.1 (FEDORA-2017-3a568adb31)
C/C++ library for processing large images
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
waf-1.9.13-1.fc25 (FEDORA-2017-323f40036e)
A Python-based build system
--------------------------------------------------------------------------------
Update Information:
#### Waf 1.9.13 #### * Fix a regression introduced by #1974 on Python2 with
unicode characters in config.log * Protobuf example update #2000 * Better
detection for old msvc compilers #2002 * Better detection for old gcc compilers
#2003
--------------------------------------------------------------------------------
================================================================================
xen-4.7.3-4.fc25 (FEDORA-2017-ed735463e3)
Xen is a virtual machine monitor
--------------------------------------------------------------------------------
Update Information:
Qemu: usb: ohci: infinite loop due to incorrect return value [CVE-2017-9330]
(#1457698) Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort
[CVE-2017-10664] (#1466466) revised full fix for XSA-226 (regressed 32-bit Dom0
or backend domains) ---- full fix for XSA-226, replacing workaround drop
conflict of xendomain and libvirtd as can cause problems (#1398590) add-to-
physmap error paths fail to release lock on ARM [XSA-235] (#1484476) Qemu:
audio: host memory leakage via capture buffer [CVE-2017-8309] (#1446521) Qemu:
input: host memory leakage via keyboard events [CVE-2017-8379] (#1446561) ----
Qemu: serial: host memory leakage 16550A UART emulation [CVE-2017-5579]
(#1416162) Qemu: display: cirrus: OOB read access issue [CVE-2017-7718]
(#1443444) xen: various flaws (#1481765) multiple problems with transitive
grants [XSA-226, CVE-2017-12135] x86: PV privilege escalation via map_grant_ref
[XSA-227, CVE-2017-12137] grant_table: Race conditions with maptrack free list
handling [XSA-228, CVE-2017-12136] grant_table: possibly premature clearing of
GTF_writing / GTF_reading [XSA-230, CVE-2017-12855]
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1457697 - CVE-2017-9330 Qemu: usb: ohci: infinite loop due to incorrect
return value
https://bugzilla.redhat.com/show_bug.cgi?id=1457697
[ 2 ] Bug #1466190 - CVE-2017-10664 Qemu: qemu-nbd: server breaks with SIGPIPE upon
client abort
https://bugzilla.redhat.com/show_bug.cgi?id=1466190
[ 3 ] Bug #1484476 - xsa235 xen: add-to-physmap error paths fail to release lock on ARM
https://bugzilla.redhat.com/show_bug.cgi?id=1484476
[ 4 ] Bug #1446517 - CVE-2017-8309 Qemu: audio: host memory leakage via capture buffer
https://bugzilla.redhat.com/show_bug.cgi?id=1446517
[ 5 ] Bug #1446547 - CVE-2017-8379 Qemu: input: host memory lekage via keyboard events
https://bugzilla.redhat.com/show_bug.cgi?id=1446547
[ 6 ] Bug #1477651 - CVE-2017-12136 xsa228 xen: grant_table: Race conditions with
maptrack free list handling (XSA-228)
https://bugzilla.redhat.com/show_bug.cgi?id=1477651
[ 7 ] Bug #1477655 - CVE-2017-12135 xsa226 xen: possibly unbounded recursion in grant
table code (XSA-226)
https://bugzilla.redhat.com/show_bug.cgi?id=1477655
[ 8 ] Bug #1477657 - CVE-2017-12137 xsa227 xen: x86: PV privilege escalation via
map_grant_ref (XSA-227)
https://bugzilla.redhat.com/show_bug.cgi?id=1477657
[ 9 ] Bug #1481762 - CVE-2017-12855 xsa230 CVE-2017-12855 xen: grant_table: possibly
premature clearing of GTF_writing / GTF_reading (XSA-230)
https://bugzilla.redhat.com/show_bug.cgi?id=1481762
--------------------------------------------------------------------------------
================================================================================
xrootd-4.7.0-1.fc25 (FEDORA-2017-f65860e69f)
Extended ROOT file server
--------------------------------------------------------------------------------
Update Information:
XRootD 4.7.0. * Bindings for python 3 added (Fedora) *
https://github.com/xrootd/xrootd/blob/v4.7.0/docs/ReleaseNotes.txt
--------------------------------------------------------------------------------