[SECURITY] Fedora 36 Update: openscad-2021.01-8.fc36
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-1cf6eefd62
2022-05-07 04:08:14.311269
--------------------------------------------------------------------------------
Name : openscad
Product : Fedora 36
Version : 2021.01
Release : 8.fc36
URL : http://www.openscad.org/
Summary : The Programmers Solid 3D CAD Modeller
Description :
OpenSCAD is a software for creating solid 3D CAD objects.
Unlike most free software for creating 3D models (such as the famous
application Blender) it does not focus on the artistic aspects of 3D
modeling but instead on the CAD aspects. Thus it might be the application
you are looking for when you are planning to create 3D models of machine
parts but pretty sure is not what you are looking for when you are more
interested in creating computer-animated movies.
--------------------------------------------------------------------------------
Update Information:
Security fixes for CVE-2022-0496 and CVE-2022-0497
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 5 2022 Lum��r Balhar <lbalhar(a)redhat.com> - 2021.01-8
- Security fixes for CVE-2022-0496 and CVE-2022-0497
- Fixes: rhbz#2050696 rhbz#2050700
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2050695 - CVE-2022-0496 openscad: Out-of-bounds memory access in DXF loader
https://bugzilla.redhat.com/show_bug.cgi?id=2050695
[ 2 ] Bug #2050699 - CVE-2022-0497 openscad: Out-of-bounds memory access in comment
parser
https://bugzilla.redhat.com/show_bug.cgi?id=2050699
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-1cf6eefd62' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------