The following Fedora 25 Security updates need testing:
Age URL
242
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d79ba708cb exim-4.87.1-1.fc25
141
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e2d17af41e
python-XStatic-jquery-ui-1.12.0.1-4.fc25
80
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5d7498559f
nodejs-brace-expansion-1.1.7-1.fc25
40
https://bodhi.fedoraproject.org/updates/FEDORA-2017-86cfcbbae8
libstaroffice-0.0.4-1.fc25
34
https://bodhi.fedoraproject.org/updates/FEDORA-2017-99c0118c0c
memcached-1.4.39-1.fc25
30
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2232fe97b4
docker-distribution-2.6.2-1.git48294d9.fc25
25
https://bodhi.fedoraproject.org/updates/FEDORA-2017-be3df4fe14
java-1.8.0-openjdk-aarch32-1.8.0.141-1.170721.fc25
14
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9148fe36b9
postgresql-9.5.8-1.fc25
12
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7e5ac0896e
botan-1.10.16-1.fc25
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-fa1d8ad61a
mercurial-3.8.1-4.fc25
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-97eb475d93
cvs-1.11.23-41.fc25
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-df343b3e09
chromium-60.0.3112.101-1.fc25
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-270ab2baa3 glibc-2.24-10.fc25
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a00a087fd4
tomcat-8.0.46-1.fc25
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2f1ca6beb7
cacti-1.1.19-1.fc25
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-98e8569b33
dnsdist-1.2.0-1.fc25
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2317191f8a
taglib-1.11.1-5.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-902970c18f
drupal8-8.3.7-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6a0389a6a7
groovy18-1.8.9-30.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bdd0b565ef
thunderbird-52.3.0-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f0b31bc9c5
mingw-libzip-1.1.3-2.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-fa6784d0bd
libsndfile-1.0.28-6.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7dacb3c21c
augeas-1.8.1-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-3a568adb31
ImageMagick-6.9.9.9-1.fc25 WindowMaker-0.95.7-3.fc25.1 autotrace-0.31.1-49.fc25
converseen-0.9.6.2-3.fc25 drawtiming-0.7.1-22.fc25 emacs-25.2-5.fc25 gtatool-2.2.0-6.fc25
imageinfo-0.05-27.fc25 inkscape-0.92.1-4.20170510bzr15686.fc25.1 kxstitch-1.2.0-9.fc25
perl-Image-SubImageFind-0.03-13.fc25 pfstools-2.0.6-3.fc25 php-pecl-imagick-3.4.3-2.fc25
psiconv-0.9.8-22.fc25 q-7.11-29.fc25 ripright-0.11-5.fc25 rss-glx-0.9.1.p-27.fc25.1
rubygem-rmagick-2.16.0-4.fc25.2 synfig-1.2.0-1.fc25.1 synfigstudio-1.2.0-5.fc25
techne-0.2.3-20.fc25 vdr-scraper2vdr-1.0.5-4.20170611git254122b.fc25 vips-8.4.4-1.fc25.1
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-978bebe3a7 xen-4.7.3-3.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8ab30db61c
copr-dist-git-0.36-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-4b4c022807
kernel-4.12.9-200.fc25
The following Fedora 25 Critical Path updates have yet to be approved:
Age URL
84
https://bodhi.fedoraproject.org/updates/FEDORA-2017-613a72e282 lorax-25.22-1.fc25
12
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ba3e72c511
osinfo-db-20170813-1.fc25
12
https://bodhi.fedoraproject.org/updates/FEDORA-2017-67705933e3
glusterfs-3.10.5-1.fc25
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bd0324f3e9
p11-kit-0.23.8-1.fc25
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-97eb475d93
cvs-1.11.23-41.fc25
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0c6291cd4b
pango-1.40.9-1.fc25
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ee474bb41c file-5.29-9.fc25
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e9a1ddb533
rpm-4.13.0.1-2.fc25
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e22c6d53db
mariadb-10.1.26-2.fc25
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ed2a089d21 lz4-1.8.0-1.fc25
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-270ab2baa3 glibc-2.24-10.fc25
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bb07876a1c nspr-4.16.0-1.fc25
nss-3.32.0-1.1.fc25 nss-softokn-3.32.0-1.2.fc25 nss-util-3.32.0-1.0.fc25
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2317191f8a
taglib-1.11.1-5.fc25
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a6fc26e60e vim-8.0.983-1.fc25
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0442143306
gdk-pixbuf2-2.36.9-1.fc25
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-08a8ae97e7
gnutls-3.5.15-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7dacb3c21c
augeas-1.8.1-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9badc4b4fa
upower-0.99.5-2.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-fa6784d0bd
libsndfile-1.0.28-6.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e8df43a1e0
python3-3.5.4-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a2f2ef5a3c
NetworkManager-1.4.6-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bdd0b565ef
thunderbird-52.3.0-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9168a2790d
libglvnd-0.2.999-24.20170818git8d4d03f.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-966ff8db5a
pungi-4.1.18-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-66902d17b7
firefox-55.0.2-2.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-3ff7bcde09 llvm-3.9.1-5.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-4b4c022807
kernel-4.12.9-200.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-67f16d96dc
libepoxy-1.4.3-1.fc25.1
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-978bebe3a7 xen-4.7.3-3.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-3a568adb31
ImageMagick-6.9.9.9-1.fc25 WindowMaker-0.95.7-3.fc25.1 autotrace-0.31.1-49.fc25
converseen-0.9.6.2-3.fc25 drawtiming-0.7.1-22.fc25 emacs-25.2-5.fc25 gtatool-2.2.0-6.fc25
imageinfo-0.05-27.fc25 inkscape-0.92.1-4.20170510bzr15686.fc25.1 kxstitch-1.2.0-9.fc25
perl-Image-SubImageFind-0.03-13.fc25 pfstools-2.0.6-3.fc25 php-pecl-imagick-3.4.3-2.fc25
psiconv-0.9.8-22.fc25 q-7.11-29.fc25 ripright-0.11-5.fc25 rss-glx-0.9.1.p-27.fc25.1
rubygem-rmagick-2.16.0-4.fc25.2 synfig-1.2.0-1.fc25.1 synfigstudio-1.2.0-5.fc25
techne-0.2.3-20.fc25 vdr-scraper2vdr-1.0.5-4.20170611git254122b.fc25 vips-8.4.4-1.fc25.1
The following builds have been pushed to Fedora 25 updates-testing
ImageMagick-6.9.9.9-1.fc25
WindowMaker-0.95.7-3.fc25.1
YafaRay-3.3.0-1.fc25
ardour5-5.11.0-4.fc25
atomic-1.19.1-1.fc25
autotrace-0.31.1-49.fc25
bluedevil-5.10.5-1.fc25
breeze-gtk-5.10.5-1.fc25
caja-1.18.4-1.fc25
converseen-0.9.6.2-3.fc25
copr-dist-git-0.36-1.fc25
drawtiming-0.7.1-22.fc25
emacs-25.2-5.fc25
endless-sky-0.9.8-1.fc25
entangle-0.7.2-1.fc25
fedrepo-req-1.6.0-2.fc25
freeipmi-1.5.7-1.fc25
gasnet-1.28.2-7.fc25
golang-github-klauspost-reedsolomon-1.5-1.fc25
golang-github-mattn-go-isatty-0-0.3.git66b8e73.fc25
grub2-breeze-theme-5.10.5-1.fc25
gtatool-2.2.0-6.fc25
imageinfo-0.05-27.fc25
inkscape-0.92.1-4.20170510bzr15686.fc25.1
kactivitymanagerd-5.10.5-1.fc25
kde-cli-tools-5.10.5-1.fc25
kde-gtk-config-5.10.5-1.fc25
kdecoration-5.10.5-1.fc25
kdeplasma-addons-5.10.5-1.fc25
kernel-4.12.9-200.fc25
kf5-kirigami2-2.1.0-1.fc25
kgamma-5.10.5-1.fc25
khotkeys-5.10.5-1.fc25
kinfocenter-5.10.5-1.fc25
kmenuedit-5.10.5-1.fc25
kscreen-5.10.5-1.fc25
kscreenlocker-5.10.5-1.fc25
ksshaskpass-5.10.5-1.fc25
ksysguard-5.10.5-1.fc25
kwayland-integration-5.10.5-1.fc25
kwin-5.10.5-1.fc25
kwrited-5.10.5-1.fc25
kxstitch-1.2.0-9.fc25
legion-17.08.0-1.fc25
libepoxy-1.4.3-1.fc25.1
libkscreen-qt5-5.10.5-1.fc25
libksysguard-5.10.5-1.fc25
llvm-3.9.1-5.fc25
mingw-openal-soft-1.18.1-1.fc25
mint-y-icons-1.0.8-3.fc25
nuvola-app-bbc-iplayer-1.1-1.fc25
nuvola-app-logitech-media-server-2.2-2.fc25
nuvola-app-owncloud-music-1.2-1.fc25
nuvola-app-plex-1.3-1.fc25
nuvola-app-siriusxm-1.3-1.fc25
nuvola-app-soundcloud-1.3-1.fc25
nuvola-app-spotify-2.3-1.fc25
nuvola-app-tunein-1.3-1.fc25
nuvola-app-yandex-music-1.4-1.fc25
openscap-1.2.15-1.fc25
orthanc-1.3.0-1.fc25
osmctools-0.7-2.fc25
pam-kwallet-5.10.5-1.fc25
pdfpc-4.0.8-1.fc25
perl-Image-SubImageFind-0.03-13.fc25
pfstools-2.0.6-3.fc25
php-pecl-imagick-3.4.3-2.fc25
plasma-breeze-5.10.5-1.fc25
plasma-desktop-5.10.5-1.fc25
plasma-discover-5.10.5-1.fc25
plasma-integration-5.10.5-1.fc25
plasma-milou-5.10.5-1.fc25
plasma-nm-5.10.5-1.fc25
plasma-oxygen-5.10.5-1.fc25
plasma-pa-5.10.5-1.fc25
plasma-sdk-5.10.5-1.fc25
plasma-systemsettings-5.10.5-1.fc25
plasma-user-manager-5.10.5-1.fc25
plasma-workspace-5.10.5-1.fc25.1
plasma-workspace-wallpapers-5.10.5-1.fc25
plymouth-theme-breeze-5.10.5-1.fc25
polkit-kde-5.10.5-1.fc25
powerdevil-5.10.5-1.fc25
psiconv-0.9.8-22.fc25
pyshp-1.2.12-1.fc25
python-yubico-1.3.2-7.fc25
q-7.11-29.fc25
quiterss-0.18.8-1.fc25
rebase-helper-0.10.0-1.fc25
ripright-0.11-5.fc25
rss-glx-0.9.1.p-27.fc25.1
rubygem-rmagick-2.16.0-4.fc25.2
sddm-kcm-5.10.5-1.fc25
synfig-1.2.0-1.fc25.1
synfigstudio-1.2.0-5.fc25
techne-0.2.3-20.fc25
vdr-scraper2vdr-1.0.5-4.20170611git254122b.fc25
vips-8.4.4-1.fc25.1
whichwayisup-0.7.9-3.fc25
wine-2.15-1.fc25
xen-4.7.3-3.fc25
Details about builds:
================================================================================
ImageMagick-6.9.9.9-1.fc25 (FEDORA-2017-3a568adb31)
An X application for displaying and manipulating images
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
WindowMaker-0.95.7-3.fc25.1 (FEDORA-2017-3a568adb31)
A fast, feature rich Window Manager
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
YafaRay-3.3.0-1.fc25 (FEDORA-2017-f844244550)
A free open-source ray-tracing render engine
--------------------------------------------------------------------------------
Update Information:
Update to 3.3.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1484182 - YafaRay-v3.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1484182
--------------------------------------------------------------------------------
================================================================================
ardour5-5.11.0-4.fc25 (FEDORA-2017-6e80482f11)
Digital Audio Workstation
--------------------------------------------------------------------------------
Update Information:
New upstream release 5.11.0 See [Ardour 5.11
released](https://community.ardour.org/node/15240)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1482283 - ardour5-5.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1482283
--------------------------------------------------------------------------------
================================================================================
atomic-1.19.1-1.fc25 (FEDORA-2017-fe0d525e3a)
Tool for managing ProjectAtomic systems and containers
--------------------------------------------------------------------------------
Update Information:
Release new version 1.19.1
--------------------------------------------------------------------------------
================================================================================
autotrace-0.31.1-49.fc25 (FEDORA-2017-3a568adb31)
Utility for converting bitmaps to vector graphics
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
bluedevil-5.10.5-1.fc25 (FEDORA-2017-73a2d209e4)
Bluetooth stack for KDE
--------------------------------------------------------------------------------
Update Information:
KDE Plasma 5.10.5 release, see also
https://www.kde.org/announcements/plasma-5.10.5.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356890 - RPM Bundling Fedora look and feel themes
https://bugzilla.redhat.com/show_bug.cgi?id=1356890
--------------------------------------------------------------------------------
================================================================================
breeze-gtk-5.10.5-1.fc25 (FEDORA-2017-73a2d209e4)
Breeze widget theme for Gtk2 and Gtk3
--------------------------------------------------------------------------------
Update Information:
KDE Plasma 5.10.5 release, see also
https://www.kde.org/announcements/plasma-5.10.5.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356890 - RPM Bundling Fedora look and feel themes
https://bugzilla.redhat.com/show_bug.cgi?id=1356890
--------------------------------------------------------------------------------
================================================================================
caja-1.18.4-1.fc25 (FEDORA-2017-155e945695)
File manager for MATE
--------------------------------------------------------------------------------
Update Information:
- update to 1.18.4 - add virtual provides for < f27 again, rhbz (#1479625)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1479625 - caja: mate-file-manager* virtual provides removed in updates repo
https://bugzilla.redhat.com/show_bug.cgi?id=1479625
--------------------------------------------------------------------------------
================================================================================
converseen-0.9.6.2-3.fc25 (FEDORA-2017-3a568adb31)
A batch image conversion tool written in C++ with Qt5 and Magick++
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
copr-dist-git-0.36-1.fc25 (FEDORA-2017-8ab30db61c)
Copr services for Dist Git server
--------------------------------------------------------------------------------
Update Information:
Security fix: parse spec file in isolation. ---- fix cvs-data ignore regular
expression ---- - remove --global for git config in tests so that it does not
modify ~/.gitconfig - fix #106 Renaming a spec file in a newer version causes
the build to fail - make get_package_name more robust - add DistGitProvider
with support for multiple distgits
--------------------------------------------------------------------------------
================================================================================
drawtiming-0.7.1-22.fc25 (FEDORA-2017-3a568adb31)
A command line tool for generating timing diagrams
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
emacs-25.2-5.fc25 (FEDORA-2017-3a568adb31)
GNU Emacs text editor
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
endless-sky-0.9.8-1.fc25 (FEDORA-2017-dc6d821d53)
Space exploration, trading, and combat game
--------------------------------------------------------------------------------
Update Information:
* A new area, the Ember Waste, populated by a new faction and new space-dwelling
creatures. * A "logbook" with brief, automatic summaries of important missions
you've completed. * The "Outfits Expansion" reduces your ship's cooling
if you
install too many. * Turrets have limited turn rates and can each choose and
track targets independently. * The game now moves at triple speed when caps lock
is on (e.g. to speed up travel). * Pirate "raids" now depend on how well
defended your fleet is, not how many freighters you have.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1473666 - endless-sky-0.9.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1473666
--------------------------------------------------------------------------------
================================================================================
entangle-0.7.2-1.fc25 (FEDORA-2017-3fa877ac23)
Tethered shooting & control of digital cameras
--------------------------------------------------------------------------------
Update Information:
Update to 0.7.2 release
--------------------------------------------------------------------------------
================================================================================
fedrepo-req-1.6.0-2.fc25 (FEDORA-2017-12dcc66bfd)
CLI for Fedora package repo requests
--------------------------------------------------------------------------------
Update Information:
* Fixed a bug when requesting a new module repo * Improve the logic that
determines the FAS user from a Bugzilla email address (this is used to determine
if the user approving the Bugzilla ticket is a packager) * Fixed a bug when a
user requested a new repo with the "Fedora EPEL" product selected on their
Bugzilla ticket * Slight improvements to the documentation ---- Changes: *
Set the user agent string to "fedrepo-req/version" * Add a way to skip Bugzilla
ticket validation in fedrepo-req-admin * Explain when a user can't be found in
FAS * Don't use the Bugzilla authentication cache on fedrepo-req * Change
requirements from "git" to "git-core" ---- Updates to v1.4.0. The
client tool
is mostly unchanged except that it has a few usability improvements such as
having a man page and telling users to read the README if they haven't
configured the client tool. The admin tool has a few enhancements and bug fixes
that are listed in git. ---- Bumps to version 1.3.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1481036 - Requesting new repo errors with meaningless error message
https://bugzilla.redhat.com/show_bug.cgi?id=1481036
[ 2 ] Bug #1482575 - fedrepo-req: change requires from git to git-core
https://bugzilla.redhat.com/show_bug.cgi?id=1482575
[ 3 ] Bug #1471897 - fedrepo-req: Switch to Python 3
https://bugzilla.redhat.com/show_bug.cgi?id=1471897
--------------------------------------------------------------------------------
================================================================================
freeipmi-1.5.7-1.fc25 (FEDORA-2017-54d3b3127c)
IPMI remote console and system management software
--------------------------------------------------------------------------------
Update Information:
New version of freeipmi is available.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1482285 - freeipmi-1.5.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1482285
--------------------------------------------------------------------------------
================================================================================
gasnet-1.28.2-7.fc25 (FEDORA-2017-ec17c60312)
A Portable High-Performance Communication Layer for GAS Languages
--------------------------------------------------------------------------------
Update Information:
Version bump to legion-17.08.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1485085 - legion-17.08.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1485085
--------------------------------------------------------------------------------
================================================================================
golang-github-klauspost-reedsolomon-1.5-1.fc25 (FEDORA-2017-e568048373)
Reed-Solomon Erasure Coding in Go
--------------------------------------------------------------------------------
Update Information:
Bump to version 1.5.
--------------------------------------------------------------------------------
================================================================================
golang-github-mattn-go-isatty-0-0.3.git66b8e73.fc25 (FEDORA-2017-2530fd39f5)
Isatty for golang
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1430143 - Review Request: golang-github-mattn-go-isatty - isatty for Go
(golang)
https://bugzilla.redhat.com/show_bug.cgi?id=1430143
--------------------------------------------------------------------------------
================================================================================
grub2-breeze-theme-5.10.5-1.fc25 (FEDORA-2017-73a2d209e4)
Breeze theme for GRUB
--------------------------------------------------------------------------------
Update Information:
KDE Plasma 5.10.5 release, see also
https://www.kde.org/announcements/plasma-5.10.5.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356890 - RPM Bundling Fedora look and feel themes
https://bugzilla.redhat.com/show_bug.cgi?id=1356890
--------------------------------------------------------------------------------
================================================================================
gtatool-2.2.0-6.fc25 (FEDORA-2017-3a568adb31)
Commandline tool to manipulate GTAs
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
imageinfo-0.05-27.fc25 (FEDORA-2017-3a568adb31)
Extract attributes of digital images
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
inkscape-0.92.1-4.20170510bzr15686.fc25.1 (FEDORA-2017-3a568adb31)
Vector-based drawing program using SVG
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
kactivitymanagerd-5.10.5-1.fc25 (FEDORA-2017-73a2d209e4)
Plasma service to manage user's activities
--------------------------------------------------------------------------------
Update Information:
KDE Plasma 5.10.5 release, see also
https://www.kde.org/announcements/plasma-5.10.5.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356890 - RPM Bundling Fedora look and feel themes
https://bugzilla.redhat.com/show_bug.cgi?id=1356890
--------------------------------------------------------------------------------
================================================================================
kde-cli-tools-5.10.5-1.fc25 (FEDORA-2017-73a2d209e4)
Tools based on KDE Frameworks 5 to better interact with the system
--------------------------------------------------------------------------------
Update Information:
KDE Plasma 5.10.5 release, see also
https://www.kde.org/announcements/plasma-5.10.5.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356890 - RPM Bundling Fedora look and feel themes
https://bugzilla.redhat.com/show_bug.cgi?id=1356890
--------------------------------------------------------------------------------
================================================================================
kde-gtk-config-5.10.5-1.fc25 (FEDORA-2017-73a2d209e4)
Configure the appearance of GTK apps in KDE
--------------------------------------------------------------------------------
Update Information:
KDE Plasma 5.10.5 release, see also
https://www.kde.org/announcements/plasma-5.10.5.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356890 - RPM Bundling Fedora look and feel themes
https://bugzilla.redhat.com/show_bug.cgi?id=1356890
--------------------------------------------------------------------------------
================================================================================
kdecoration-5.10.5-1.fc25 (FEDORA-2017-73a2d209e4)
A plugin-based library to create window decorations
--------------------------------------------------------------------------------
Update Information:
KDE Plasma 5.10.5 release, see also
https://www.kde.org/announcements/plasma-5.10.5.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356890 - RPM Bundling Fedora look and feel themes
https://bugzilla.redhat.com/show_bug.cgi?id=1356890
--------------------------------------------------------------------------------
================================================================================
kdeplasma-addons-5.10.5-1.fc25 (FEDORA-2017-73a2d209e4)
Additional Plasmoids for Plasma 5
--------------------------------------------------------------------------------
Update Information:
KDE Plasma 5.10.5 release, see also
https://www.kde.org/announcements/plasma-5.10.5.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356890 - RPM Bundling Fedora look and feel themes
https://bugzilla.redhat.com/show_bug.cgi?id=1356890
--------------------------------------------------------------------------------
================================================================================
kernel-4.12.9-200.fc25 (FEDORA-2017-4b4c022807)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 4.12.9 stable kernel update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1480266 - CVE-2017-7558 kernel: Out of bounds read in
inet_diag_msg_sctp{,l}addr_fill() and sctp_get_sctp_info() in SCTP stack
https://bugzilla.redhat.com/show_bug.cgi?id=1480266
--------------------------------------------------------------------------------
================================================================================
kf5-kirigami2-2.1.0-1.fc25 (FEDORA-2017-73a2d209e4)
QtQuick plugins to build user interfaces based on the KDE UX guidelines
--------------------------------------------------------------------------------
Update Information:
KDE Plasma 5.10.5 release, see also
https://www.kde.org/announcements/plasma-5.10.5.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356890 - RPM Bundling Fedora look and feel themes
https://bugzilla.redhat.com/show_bug.cgi?id=1356890
--------------------------------------------------------------------------------
================================================================================
kgamma-5.10.5-1.fc25 (FEDORA-2017-73a2d209e4)
A monitor calibration tool
--------------------------------------------------------------------------------
Update Information:
KDE Plasma 5.10.5 release, see also
https://www.kde.org/announcements/plasma-5.10.5.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356890 - RPM Bundling Fedora look and feel themes
https://bugzilla.redhat.com/show_bug.cgi?id=1356890
--------------------------------------------------------------------------------
================================================================================
khotkeys-5.10.5-1.fc25 (FEDORA-2017-73a2d209e4)
Application to configure hotkeys in KDE
--------------------------------------------------------------------------------
Update Information:
KDE Plasma 5.10.5 release, see also
https://www.kde.org/announcements/plasma-5.10.5.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356890 - RPM Bundling Fedora look and feel themes
https://bugzilla.redhat.com/show_bug.cgi?id=1356890
--------------------------------------------------------------------------------
================================================================================
kinfocenter-5.10.5-1.fc25 (FEDORA-2017-73a2d209e4)
KDE Info Center
--------------------------------------------------------------------------------
Update Information:
KDE Plasma 5.10.5 release, see also
https://www.kde.org/announcements/plasma-5.10.5.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356890 - RPM Bundling Fedora look and feel themes
https://bugzilla.redhat.com/show_bug.cgi?id=1356890
--------------------------------------------------------------------------------
================================================================================
kmenuedit-5.10.5-1.fc25 (FEDORA-2017-73a2d209e4)
KDE menu editor
--------------------------------------------------------------------------------
Update Information:
KDE Plasma 5.10.5 release, see also
https://www.kde.org/announcements/plasma-5.10.5.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356890 - RPM Bundling Fedora look and feel themes
https://bugzilla.redhat.com/show_bug.cgi?id=1356890
--------------------------------------------------------------------------------
================================================================================
kscreen-5.10.5-1.fc25 (FEDORA-2017-73a2d209e4)
KDE Display Management software
--------------------------------------------------------------------------------
Update Information:
KDE Plasma 5.10.5 release, see also
https://www.kde.org/announcements/plasma-5.10.5.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356890 - RPM Bundling Fedora look and feel themes
https://bugzilla.redhat.com/show_bug.cgi?id=1356890
--------------------------------------------------------------------------------
================================================================================
kscreenlocker-5.10.5-1.fc25 (FEDORA-2017-73a2d209e4)
Library and components for secure lock screen architecture
--------------------------------------------------------------------------------
Update Information:
KDE Plasma 5.10.5 release, see also
https://www.kde.org/announcements/plasma-5.10.5.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356890 - RPM Bundling Fedora look and feel themes
https://bugzilla.redhat.com/show_bug.cgi?id=1356890
--------------------------------------------------------------------------------
================================================================================
ksshaskpass-5.10.5-1.fc25 (FEDORA-2017-73a2d209e4)
A ssh-add helper that uses kwallet and kpassworddialog
--------------------------------------------------------------------------------
Update Information:
KDE Plasma 5.10.5 release, see also
https://www.kde.org/announcements/plasma-5.10.5.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356890 - RPM Bundling Fedora look and feel themes
https://bugzilla.redhat.com/show_bug.cgi?id=1356890
--------------------------------------------------------------------------------
================================================================================
ksysguard-5.10.5-1.fc25 (FEDORA-2017-73a2d209e4)
KDE Process Management application
--------------------------------------------------------------------------------
Update Information:
KDE Plasma 5.10.5 release, see also
https://www.kde.org/announcements/plasma-5.10.5.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356890 - RPM Bundling Fedora look and feel themes
https://bugzilla.redhat.com/show_bug.cgi?id=1356890
--------------------------------------------------------------------------------
================================================================================
kwayland-integration-5.10.5-1.fc25 (FEDORA-2017-73a2d209e4)
Provides integration plugins for various KDE Frameworks for Wayland
--------------------------------------------------------------------------------
Update Information:
KDE Plasma 5.10.5 release, see also
https://www.kde.org/announcements/plasma-5.10.5.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356890 - RPM Bundling Fedora look and feel themes
https://bugzilla.redhat.com/show_bug.cgi?id=1356890
--------------------------------------------------------------------------------
================================================================================
kwin-5.10.5-1.fc25 (FEDORA-2017-73a2d209e4)
KDE Window manager
--------------------------------------------------------------------------------
Update Information:
KDE Plasma 5.10.5 release, see also
https://www.kde.org/announcements/plasma-5.10.5.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356890 - RPM Bundling Fedora look and feel themes
https://bugzilla.redhat.com/show_bug.cgi?id=1356890
--------------------------------------------------------------------------------
================================================================================
kwrited-5.10.5-1.fc25 (FEDORA-2017-73a2d209e4)
KDE Write Daemon
--------------------------------------------------------------------------------
Update Information:
KDE Plasma 5.10.5 release, see also
https://www.kde.org/announcements/plasma-5.10.5.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356890 - RPM Bundling Fedora look and feel themes
https://bugzilla.redhat.com/show_bug.cgi?id=1356890
--------------------------------------------------------------------------------
================================================================================
kxstitch-1.2.0-9.fc25 (FEDORA-2017-3a568adb31)
Program to create cross stitch patterns
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
legion-17.08.0-1.fc25 (FEDORA-2017-ec17c60312)
A data-centric parallel programming system
--------------------------------------------------------------------------------
Update Information:
Version bump to legion-17.08.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1485085 - legion-17.08.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1485085
--------------------------------------------------------------------------------
================================================================================
libepoxy-1.4.3-1.fc25.1 (FEDORA-2017-67f16d96dc)
epoxy runtime library
--------------------------------------------------------------------------------
Update Information:
Backport upstream fix for undefined EGL_CAST (for mesa-17.0.x)
--------------------------------------------------------------------------------
================================================================================
libkscreen-qt5-5.10.5-1.fc25 (FEDORA-2017-73a2d209e4)
KDE display configuration library
--------------------------------------------------------------------------------
Update Information:
KDE Plasma 5.10.5 release, see also
https://www.kde.org/announcements/plasma-5.10.5.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356890 - RPM Bundling Fedora look and feel themes
https://bugzilla.redhat.com/show_bug.cgi?id=1356890
--------------------------------------------------------------------------------
================================================================================
libksysguard-5.10.5-1.fc25 (FEDORA-2017-73a2d209e4)
Library for managing processes running on the system
--------------------------------------------------------------------------------
Update Information:
KDE Plasma 5.10.5 release, see also
https://www.kde.org/announcements/plasma-5.10.5.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356890 - RPM Bundling Fedora look and feel themes
https://bugzilla.redhat.com/show_bug.cgi?id=1356890
--------------------------------------------------------------------------------
================================================================================
llvm-3.9.1-5.fc25 (FEDORA-2017-3ff7bcde09)
The Low Level Virtual Machine
--------------------------------------------------------------------------------
Update Information:
Fixes for rhbz1403539 and rhbz1435545.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1403539 - llvm-devel %postun scriptlet fails on upgrade
https://bugzilla.redhat.com/show_bug.cgi?id=1403539
[ 2 ] Bug #1435545 - llvm produces illegal instructions for SKL i7 6600U with pocl
https://bugzilla.redhat.com/show_bug.cgi?id=1435545
--------------------------------------------------------------------------------
================================================================================
mingw-openal-soft-1.18.1-1.fc25 (FEDORA-2017-37489c615a)
Open Audio Library
--------------------------------------------------------------------------------
Update Information:
Update to 1.18.1
--------------------------------------------------------------------------------
================================================================================
mint-y-icons-1.0.8-3.fc25 (FEDORA-2017-57631f02c8)
The Mint-Y icon theme
--------------------------------------------------------------------------------
Update Information:
- Create symlinks for tilix
--------------------------------------------------------------------------------
================================================================================
nuvola-app-bbc-iplayer-1.1-1.fc25 (FEDORA-2017-d927c42ee5)
BBC iPlayer plugin for Nuvola Player
--------------------------------------------------------------------------------
Update Information:
* Tue Aug 22 2017 Martin Gansser <martinkg(a)fedoraproject.org> - 1.1-1 - initial
build
--------------------------------------------------------------------------------
================================================================================
nuvola-app-logitech-media-server-2.2-2.fc25 (FEDORA-2017-da9dcfa133)
Logitech Media Server for Nuvola Player 3
--------------------------------------------------------------------------------
Update Information:
* Thu Aug 24 2017 Martin Gansser <martinkg(a)fedoraproject.org> - 2.2-2 - use the
%%configure macro - DESTDIR=%%{buildroot} is not needed after %%make_install -
fix typo - Use correct Source0 * Fri Jul 28 2017 Martin Gansser
<martinkg(a)fedoraproject.org> - 2.2-1 - initial build
--------------------------------------------------------------------------------
================================================================================
nuvola-app-owncloud-music-1.2-1.fc25 (FEDORA-2017-7f6dd9be1c)
OwnCloud Music web app script for Nuvola Player 3.1
--------------------------------------------------------------------------------
Update Information:
* Fri Jul 28 2017 Martin Gansser <martinkg(a)fedoraproject.org> - 1.2-1 - initial
build
--------------------------------------------------------------------------------
================================================================================
nuvola-app-plex-1.3-1.fc25 (FEDORA-2017-6afa4bcae6)
Plex integration for Nuvola Player
--------------------------------------------------------------------------------
Update Information:
* Fri Jul 28 2017 Martin Gansser <martinkg(a)fedoraproject.org> - 1.3-1 - initial
build
--------------------------------------------------------------------------------
================================================================================
nuvola-app-siriusxm-1.3-1.fc25 (FEDORA-2017-aa78c33afc)
SiriusXM script for Nuvola Player 3
--------------------------------------------------------------------------------
Update Information:
* Fri Jul 28 2017 Martin Gansser <martinkg(a)fedoraproject.org> - 1.3-1 - initial
build
--------------------------------------------------------------------------------
================================================================================
nuvola-app-soundcloud-1.3-1.fc25 (FEDORA-2017-a217205b98)
SoundCloud WebApp for Nuvola Player 3
--------------------------------------------------------------------------------
Update Information:
* Fri Jul 28 2017 Martin Gansser <martinkg(a)fedoraproject.org> - 1.3-1 - initial
build
--------------------------------------------------------------------------------
================================================================================
nuvola-app-spotify-2.3-1.fc25 (FEDORA-2017-6c022c6344)
Spotify for Nuvola Player 3
--------------------------------------------------------------------------------
Update Information:
* Fri Jul 28 2017 Martin Gansser <martinkg(a)fedoraproject.org> - 2.3-1 - initial
build
--------------------------------------------------------------------------------
================================================================================
nuvola-app-tunein-1.3-1.fc25 (FEDORA-2017-2cfb55e71c)
Integration of TuneIn into linux desktop via Nuvola 3
--------------------------------------------------------------------------------
Update Information:
* Fri Jul 28 2017 Martin Gansser <martinkg(a)fedoraproject.org> - 1.3-1 - initial
build
--------------------------------------------------------------------------------
================================================================================
nuvola-app-yandex-music-1.4-1.fc25 (FEDORA-2017-c19f5638e3)
Yandex Music script for Nuvola Player 3
--------------------------------------------------------------------------------
Update Information:
* Fri Jul 28 2017 Martin Gansser <martinkg(a)fedoraproject.org> - 1.4-1 - initial
build
--------------------------------------------------------------------------------
================================================================================
openscap-1.2.15-1.fc25 (FEDORA-2017-e3f046c681)
Set of open source libraries enabling integration of the SCAP line of standards
--------------------------------------------------------------------------------
Update Information:
- New features - short profile names can be used instead of long IDs -
new option --rule allows to evaluate only a single rule - new option --fix-
type in "oscap xccdf generate fix" allows choosing remediation script
type
without typing long URL - "oscap info" shows profile titles - OVAL
details in HTML report are easier to read - HTML report is smaller because
unselected rules are removed - HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information - remediation
scripts report progress when they run - basic support for Oracle Linux
(CPEs, runlevels) - remediation scripts can be generated from datastreams
that contain multiple XCCDF benchmarks (issue #772) - basic support
for OVAL 5.11.2 (only schemas, no features) - enabled offline RPM database
in rpminfo probe (issue #778) - added Fedora 28 CPE - Maintenance -
fixed oscap-docker with Docker >= 2.0 (issue #794) - fixed behavior of
sysctl probe to be consistent with sysctl tool - fixed generating
remediation scripts (issue #723, #773) - severity of tailored rules is not
discarded (issue #739) - fixed errors in RPM probes initialization -
oscap-docker shows all warnings reported by oscap (issue #713) - small
improvements in verbose mode - standard C operations are used instead of
custom OpenSCAP operations - fixed compiler warnings - fixed missing
header files - fixed resource leaks (issue #715) - fixed pkgconfig file
(RHBZ #1414777) - refactoring - documentation fixes and improvements
--------------------------------------------------------------------------------
================================================================================
orthanc-1.3.0-1.fc25 (FEDORA-2017-38405c79f1)
RESTful DICOM server for healthcare and medical research
--------------------------------------------------------------------------------
Update Information:
New upstream version
--------------------------------------------------------------------------------
================================================================================
osmctools-0.7-2.fc25 (FEDORA-2017-60347a72af)
Tools to manipulate OpenStreetMap files
--------------------------------------------------------------------------------
Update Information:
First release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1464777 - Review Request: osmctools - Tools to manipulate OpenStreetMap
files
https://bugzilla.redhat.com/show_bug.cgi?id=1464777
--------------------------------------------------------------------------------
================================================================================
pam-kwallet-5.10.5-1.fc25 (FEDORA-2017-73a2d209e4)
PAM module for KWallet
--------------------------------------------------------------------------------
Update Information:
KDE Plasma 5.10.5 release, see also
https://www.kde.org/announcements/plasma-5.10.5.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356890 - RPM Bundling Fedora look and feel themes
https://bugzilla.redhat.com/show_bug.cgi?id=1356890
--------------------------------------------------------------------------------
================================================================================
pdfpc-4.0.8-1.fc25 (FEDORA-2017-e4fca07de6)
A GTK based presentation viewer application for GNU/Linux
--------------------------------------------------------------------------------
Update Information:
Update to 4.0.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1485330 - pdfpc-4.0.8-2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1485330
--------------------------------------------------------------------------------
================================================================================
perl-Image-SubImageFind-0.03-13.fc25 (FEDORA-2017-3a568adb31)
Perl extension for locating a sub-image within an image
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
pfstools-2.0.6-3.fc25 (FEDORA-2017-3a568adb31)
Programs for handling high-dynamic range images
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
php-pecl-imagick-3.4.3-2.fc25 (FEDORA-2017-3a568adb31)
Provides a wrapper to the ImageMagick library
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
plasma-breeze-5.10.5-1.fc25 (FEDORA-2017-73a2d209e4)
Artwork, styles and assets for the Breeze visual style for the Plasma Desktop
--------------------------------------------------------------------------------
Update Information:
KDE Plasma 5.10.5 release, see also
https://www.kde.org/announcements/plasma-5.10.5.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356890 - RPM Bundling Fedora look and feel themes
https://bugzilla.redhat.com/show_bug.cgi?id=1356890
--------------------------------------------------------------------------------
================================================================================
plasma-desktop-5.10.5-1.fc25 (FEDORA-2017-73a2d209e4)
Plasma Desktop shell
--------------------------------------------------------------------------------
Update Information:
KDE Plasma 5.10.5 release, see also
https://www.kde.org/announcements/plasma-5.10.5.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356890 - RPM Bundling Fedora look and feel themes
https://bugzilla.redhat.com/show_bug.cgi?id=1356890
--------------------------------------------------------------------------------
================================================================================
plasma-discover-5.10.5-1.fc25 (FEDORA-2017-73a2d209e4)
KDE and Plasma resources management GUI
--------------------------------------------------------------------------------
Update Information:
KDE Plasma 5.10.5 release, see also
https://www.kde.org/announcements/plasma-5.10.5.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356890 - RPM Bundling Fedora look and feel themes
https://bugzilla.redhat.com/show_bug.cgi?id=1356890
--------------------------------------------------------------------------------
================================================================================
plasma-integration-5.10.5-1.fc25 (FEDORA-2017-73a2d209e4)
Qt Platform Theme integration plugin for Plasma
--------------------------------------------------------------------------------
Update Information:
KDE Plasma 5.10.5 release, see also
https://www.kde.org/announcements/plasma-5.10.5.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356890 - RPM Bundling Fedora look and feel themes
https://bugzilla.redhat.com/show_bug.cgi?id=1356890
--------------------------------------------------------------------------------
================================================================================
plasma-milou-5.10.5-1.fc25 (FEDORA-2017-73a2d209e4)
A dedicated KDE search application built on top of Baloo
--------------------------------------------------------------------------------
Update Information:
KDE Plasma 5.10.5 release, see also
https://www.kde.org/announcements/plasma-5.10.5.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356890 - RPM Bundling Fedora look and feel themes
https://bugzilla.redhat.com/show_bug.cgi?id=1356890
--------------------------------------------------------------------------------
================================================================================
plasma-nm-5.10.5-1.fc25 (FEDORA-2017-73a2d209e4)
Plasma for managing network connections
--------------------------------------------------------------------------------
Update Information:
KDE Plasma 5.10.5 release, see also
https://www.kde.org/announcements/plasma-5.10.5.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356890 - RPM Bundling Fedora look and feel themes
https://bugzilla.redhat.com/show_bug.cgi?id=1356890
--------------------------------------------------------------------------------
================================================================================
plasma-oxygen-5.10.5-1.fc25 (FEDORA-2017-73a2d209e4)
Plasma and Qt widget style and window decorations for Plasma 5 and KDE 4
--------------------------------------------------------------------------------
Update Information:
KDE Plasma 5.10.5 release, see also
https://www.kde.org/announcements/plasma-5.10.5.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356890 - RPM Bundling Fedora look and feel themes
https://bugzilla.redhat.com/show_bug.cgi?id=1356890
--------------------------------------------------------------------------------
================================================================================
plasma-pa-5.10.5-1.fc25 (FEDORA-2017-73a2d209e4)
Plasma applet for audio volume management using PulseAudio
--------------------------------------------------------------------------------
Update Information:
KDE Plasma 5.10.5 release, see also
https://www.kde.org/announcements/plasma-5.10.5.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356890 - RPM Bundling Fedora look and feel themes
https://bugzilla.redhat.com/show_bug.cgi?id=1356890
--------------------------------------------------------------------------------
================================================================================
plasma-sdk-5.10.5-1.fc25 (FEDORA-2017-73a2d209e4)
Development tools for Plasma 5
--------------------------------------------------------------------------------
Update Information:
KDE Plasma 5.10.5 release, see also
https://www.kde.org/announcements/plasma-5.10.5.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356890 - RPM Bundling Fedora look and feel themes
https://bugzilla.redhat.com/show_bug.cgi?id=1356890
--------------------------------------------------------------------------------
================================================================================
plasma-systemsettings-5.10.5-1.fc25 (FEDORA-2017-73a2d209e4)
KDE System Settings application
--------------------------------------------------------------------------------
Update Information:
KDE Plasma 5.10.5 release, see also
https://www.kde.org/announcements/plasma-5.10.5.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356890 - RPM Bundling Fedora look and feel themes
https://bugzilla.redhat.com/show_bug.cgi?id=1356890
--------------------------------------------------------------------------------
================================================================================
plasma-user-manager-5.10.5-1.fc25 (FEDORA-2017-73a2d209e4)
Manage the users of your system
--------------------------------------------------------------------------------
Update Information:
KDE Plasma 5.10.5 release, see also
https://www.kde.org/announcements/plasma-5.10.5.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356890 - RPM Bundling Fedora look and feel themes
https://bugzilla.redhat.com/show_bug.cgi?id=1356890
--------------------------------------------------------------------------------
================================================================================
plasma-workspace-5.10.5-1.fc25.1 (FEDORA-2017-73a2d209e4)
Plasma workspace, applications and applets
--------------------------------------------------------------------------------
Update Information:
KDE Plasma 5.10.5 release, see also
https://www.kde.org/announcements/plasma-5.10.5.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356890 - RPM Bundling Fedora look and feel themes
https://bugzilla.redhat.com/show_bug.cgi?id=1356890
--------------------------------------------------------------------------------
================================================================================
plasma-workspace-wallpapers-5.10.5-1.fc25 (FEDORA-2017-73a2d209e4)
Additional wallpapers for Plasma workspace
--------------------------------------------------------------------------------
Update Information:
KDE Plasma 5.10.5 release, see also
https://www.kde.org/announcements/plasma-5.10.5.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356890 - RPM Bundling Fedora look and feel themes
https://bugzilla.redhat.com/show_bug.cgi?id=1356890
--------------------------------------------------------------------------------
================================================================================
plymouth-theme-breeze-5.10.5-1.fc25 (FEDORA-2017-73a2d209e4)
Breeze theme for Plymouth
--------------------------------------------------------------------------------
Update Information:
KDE Plasma 5.10.5 release, see also
https://www.kde.org/announcements/plasma-5.10.5.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356890 - RPM Bundling Fedora look and feel themes
https://bugzilla.redhat.com/show_bug.cgi?id=1356890
--------------------------------------------------------------------------------
================================================================================
polkit-kde-5.10.5-1.fc25 (FEDORA-2017-73a2d209e4)
PolicyKit integration for KDE Desktop
--------------------------------------------------------------------------------
Update Information:
KDE Plasma 5.10.5 release, see also
https://www.kde.org/announcements/plasma-5.10.5.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356890 - RPM Bundling Fedora look and feel themes
https://bugzilla.redhat.com/show_bug.cgi?id=1356890
--------------------------------------------------------------------------------
================================================================================
powerdevil-5.10.5-1.fc25 (FEDORA-2017-73a2d209e4)
Manages the power consumption settings of a Plasma Shell
--------------------------------------------------------------------------------
Update Information:
KDE Plasma 5.10.5 release, see also
https://www.kde.org/announcements/plasma-5.10.5.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356890 - RPM Bundling Fedora look and feel themes
https://bugzilla.redhat.com/show_bug.cgi?id=1356890
--------------------------------------------------------------------------------
================================================================================
psiconv-0.9.8-22.fc25 (FEDORA-2017-3a568adb31)
A conversion utility for Psion files
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
pyshp-1.2.12-1.fc25 (FEDORA-2017-c6a31ea6d0)
Pure Python read/write support for ESRI Shapefile format
--------------------------------------------------------------------------------
Update Information:
* Fixed errors caused by strict value type checking, as introduced in v1.2.11.
Now more lenient by attempting force conversion of values to match the field
type. * Allow reading file-like objects without seek method (such as ZipFile or
urllib.urlopen).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1485090 - pyshp-1.2.12 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1485090
--------------------------------------------------------------------------------
================================================================================
python-yubico-1.3.2-7.fc25 (FEDORA-2017-504924ee4f)
Pure-python library for interacting with Yubikeys
--------------------------------------------------------------------------------
Update Information:
Backports a Python 3.x fix from upstrema.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1484862 - python-yubico crashes in Python 3 when searching for devices
https://bugzilla.redhat.com/show_bug.cgi?id=1484862
--------------------------------------------------------------------------------
================================================================================
q-7.11-29.fc25 (FEDORA-2017-3a568adb31)
Equational programming language
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
quiterss-0.18.8-1.fc25 (FEDORA-2017-648cca97af)
RSS/Atom aggregator
--------------------------------------------------------------------------------
Update Information:
Version bump
--------------------------------------------------------------------------------
================================================================================
rebase-helper-0.10.0-1.fc25 (FEDORA-2017-972788b4a3)
The tool that helps you to rebase your package to the latest version
--------------------------------------------------------------------------------
Update Information:
News in **rebase-helper 0.10.0**: - Implemented extensible SPEC hooks and
versioneers - Added **PyPI** SPEC hook for automatic fixing of Source URL of
Python packages - Added **Anitya** and **PyPI** versioneers for determining
latest upstream version of a package - Added possibility to download old version
build of a package from Koji - Added support for test suite to be run in Docker
containers - Implemented functional tests for automatic testing of whole rebase
process - Diff against original source files is now generated as *changes.patch*
- Introduced plugin system for extending build tools, checkers and output tools
- Updated for **Koji 1.13** which finally brings Python 3 support - Improved
output information and reports - Added colorized output - Improved project
documentation - Pre-configured git username and e-mail address is now used if
available - Fixed several issues in **rpmdiff** and especially **abipkgdiff**
checkers - Fixed several test suite related issues
--------------------------------------------------------------------------------
================================================================================
ripright-0.11-5.fc25 (FEDORA-2017-3a568adb31)
Minimal CD to FLAC ripper
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
rss-glx-0.9.1.p-27.fc25.1 (FEDORA-2017-3a568adb31)
Really Slick Screensavers
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
rubygem-rmagick-2.16.0-4.fc25.2 (FEDORA-2017-3a568adb31)
Ruby binding to ImageMagick
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
sddm-kcm-5.10.5-1.fc25 (FEDORA-2017-73a2d209e4)
SDDM KDE configuration module
--------------------------------------------------------------------------------
Update Information:
KDE Plasma 5.10.5 release, see also
https://www.kde.org/announcements/plasma-5.10.5.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356890 - RPM Bundling Fedora look and feel themes
https://bugzilla.redhat.com/show_bug.cgi?id=1356890
--------------------------------------------------------------------------------
================================================================================
synfig-1.2.0-1.fc25.1 (FEDORA-2017-3a568adb31)
Vector-based 2D animation rendering backend
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
synfigstudio-1.2.0-5.fc25 (FEDORA-2017-3a568adb31)
Vector-based 2D animation studio
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
techne-0.2.3-20.fc25 (FEDORA-2017-3a568adb31)
A general purpose, programmable physical simulator and renderer
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
vdr-scraper2vdr-1.0.5-4.20170611git254122b.fc25 (FEDORA-2017-3a568adb31)
A client plugin which provides scraped metadata from EPGD to other plugins
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
vips-8.4.4-1.fc25.1 (FEDORA-2017-3a568adb31)
C/C++ library for processing large images
--------------------------------------------------------------------------------
Update Information:
Many security fixes, bug fixes, and other changes from the previous version
6.9.3.0. See the [6.9 branch
ChangeLog](https://github.com/ImageMagick/ImageMagi
ck/blob/3fd358e2ac34977fda38a2cf4d88a1cb4dd2d7c7/ChangeLog). Dependent packages
are mostly straight rebuilds, a couple also include bugfix version updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408404 - CVE-2016-8707 ImageMagick: OOB write in convert utility when
deflating TIFF files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1408404
[ 2 ] Bug #1413898 - CVE-2016-9556 CVE-2016-9559 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1413898
[ 3 ] Bug #1453125 - CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE
decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1453125
[ 4 ] Bug #1455602 - CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1455602
[ 5 ] Bug #1465064 - CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8352
ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1465064
[ 6 ] Bug #1470670 - CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function
when processing TGA or VST file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470670
[ 7 ] Bug #1471122 - CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471122
[ 8 ] Bug #1471837 - CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c
can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471837
[ 9 ] Bug #1483575 - CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage
function in coders\pwp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483575
[ 10 ] Bug #1483132 - CVE-2017-12433 CVE-2017-12434 CVE-2017-12435 ImageMagick: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483132
[ 11 ] Bug #1483117 - CVE-2017-12640 CVE-2017-12641 CVE-2017-12642 CVE-2017-12643
CVE-2017-12644 CVE-2017-12654 CVE-2017-12662 CVE-2017-12663 CVE-2017-12664 CVE-2017-12665
CVE-2017-12666 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1483117
[ 12 ] Bug #1482655 - CVE-2017-12427 CVE-2017-12428 CVE-2017-12429 CVE-2017-12430
CVE-2017-12432 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482655
[ 13 ] Bug #1482626 - CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and
format8BIM functions in coders/meta.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1482626
[ 14 ] Bug #1350462 - CVE-2016-5841 CVE-2016-5842 imagemagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1350462
[ 15 ] Bug #1361494 - CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361494
[ 16 ] Bug #1378790 - CVE-2014-9907 CVE-2015-8957 CVE-2015-8958 CVE-2015-8959
CVE-2016-6823 CVE-2016-7101 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516
CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 ... ImageMagick:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1378790
[ 17 ] Bug #1361578 - CVE-2016-5010 ImageMagick: Out-of-bounds read when processing
crafted tiff file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1361578
[ 18 ] Bug #1477566 - CVE-2017-12140 ImageMagick: integer signedness error in
ReadDCMImage function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477566
[ 19 ] Bug #1477070 - CVE-2017-11724 CVE-2017-11750 CVE-2017-11751 CVE-2017-11752
CVE-2017-11753 CVE-2017-11754 CVE-2017-11755 ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477070
[ 20 ] Bug #1475486 - CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage()
coders/mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475486
[ 21 ] Bug #1475471 - CVE-2017-11639 ImageMagick: heap-based buffer over-read in the
WriteCIPImage() function in coders/cip.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475471
[ 22 ] Bug #1475464 - CVE-2017-11640 ImageMagick: NULL pointer dereference in
WritePTIFImage() in coders/tiff.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475464
[ 23 ] Bug #1474846 - CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function
in coders/txt.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474846
[ 24 ] Bug #1474420 - CVE-2017-11446 CVE-2017-11478 ImageMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1474420
[ 25 ] Bug #1473848 - CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473848
[ 26 ] Bug #1473825 - CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage
function in coders\dpx.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473825
[ 27 ] Bug #1473799 - CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage
function in coders/screenshot.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473799
[ 28 ] Bug #1473797 - CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob
sizes of stdin image input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473797
[ 29 ] Bug #1473775 - CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of
service in coders/jpeg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473775
[ 30 ] Bug #1473758 - CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage
function in coders\mat.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473758
[ 31 ] Bug #1473719 - CVE-2017-10928 ImageMagick: heap-based buffer over-read in the
GetNextToken function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1473719
[ 32 ] Bug #1410515 - ImageMagick: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410515
--------------------------------------------------------------------------------
================================================================================
whichwayisup-0.7.9-3.fc25 (FEDORA-2017-61c13c84db)
2D platform game with a slight rotational twist
--------------------------------------------------------------------------------
Update Information:
First release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1464778 - Review Request: whichwayisup - 2D platform game with a slight
rotational twist
https://bugzilla.redhat.com/show_bug.cgi?id=1464778
--------------------------------------------------------------------------------
================================================================================
wine-2.15-1.fc25 (FEDORA-2017-0fcd636138)
A compatibility layer for windows applications
--------------------------------------------------------------------------------
Update Information:
Wine-staging - Support for dual source blending and arbitrary viewports in
d3d11. - JPEG decoder bug fixes and support for converting CMYK images in
windowscodecs. - Support for 192/256 bit AES encryption and key import/export in
bcrypt. - Various smaller enhancements and bug fixes.
Winehq.org - Support for
AES encryption. - Improved Bezier support in Direct2D. - Chunked transfer
improvements in WinInet. - Various bug fixes.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1483323 - wine-2.15 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1483323
--------------------------------------------------------------------------------
================================================================================
xen-4.7.3-3.fc25 (FEDORA-2017-978bebe3a7)
Xen is a virtual machine monitor
--------------------------------------------------------------------------------
Update Information:
full fix for XSA-226, replacing workaround drop conflict of xendomain and
libvirtd as can cause problems (#1398590) add-to-physmap error paths fail to
release lock on ARM [XSA-235] (#1484476) Qemu: audio: host memory leakage via
capture buffer [CVE-2017-8309] (#1446521) Qemu: input: host memory leakage via
keyboard events [CVE-2017-8379] (#1446561) ---- Qemu: serial: host memory
leakage 16550A UART emulation [CVE-2017-5579] (#1416162) Qemu: display: cirrus:
OOB read access issue [CVE-2017-7718] (#1443444) xen: various flaws (#1481765)
multiple problems with transitive grants [XSA-226, CVE-2017-12135] x86: PV
privilege escalation via map_grant_ref [XSA-227, CVE-2017-12137] grant_table:
Race conditions with maptrack free list handling [XSA-228, CVE-2017-12136]
grant_table: possibly premature clearing of GTF_writing / GTF_reading [XSA-230,
CVE-2017-12855]
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1484476 - xsa235 xen: add-to-physmap error paths fail to release lock on ARM
https://bugzilla.redhat.com/show_bug.cgi?id=1484476
[ 2 ] Bug #1446517 - CVE-2017-8309 Qemu: audio: host memory leakage via capture buffer
https://bugzilla.redhat.com/show_bug.cgi?id=1446517
[ 3 ] Bug #1446547 - CVE-2017-8379 Qemu: input: host memory lekage via keyboard events
https://bugzilla.redhat.com/show_bug.cgi?id=1446547
[ 4 ] Bug #1477651 - CVE-2017-12136 xsa228 xen: grant_table: Race conditions with
maptrack free list handling (XSA-228)
https://bugzilla.redhat.com/show_bug.cgi?id=1477651
[ 5 ] Bug #1477655 - CVE-2017-12135 xsa226 xen: possibly unbounded recursion in grant
table code (XSA-226)
https://bugzilla.redhat.com/show_bug.cgi?id=1477655
[ 6 ] Bug #1477657 - CVE-2017-12137 xsa227 xen: x86: PV privilege escalation via
map_grant_ref (XSA-227)
https://bugzilla.redhat.com/show_bug.cgi?id=1477657
[ 7 ] Bug #1481762 - CVE-2017-12855 xsa230 CVE-2017-12855 xen: grant_table: possibly
premature clearing of GTF_writing / GTF_reading (XSA-230)
https://bugzilla.redhat.com/show_bug.cgi?id=1481762
--------------------------------------------------------------------------------