[SECURITY] Fedora 35 Update: halibut-1.3-3.fc35
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-9a9abd295b
2022-06-16 01:25:59.231135
--------------------------------------------------------------------------------
Name : halibut
Product : Fedora 35
Version : 1.3
Release : 3.fc35
URL : http://www.chiark.greenend.org.uk/~sgtatham/halibut.html
Summary : TeX-like software manual tool
Description :
Halibut is yet another text formatting system, intended primarily for
writing software documentation. It accepts a single source format and
outputs a variety of formats, planned to include text, HTML, Texinfo,
Windows Help, Windows HTMLHelp, PostScript and PDF. It has comprehensive
indexing and cross-referencing support, and generates hyperlinks within
output documents wherever possible.
--------------------------------------------------------------------------------
Update Information:
This is an update fixing CVE-2021-42612, CVE-2021-42613, CVE-2021-42614.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Tue Nov 2 2021 Jaroslav ��karvada <jskarvad(a)redhat.com> - 1.3-2
- Release bump to test fedora-infrastructure #10301
* Mon Nov 1 2021 Jaroslav ��karvada <jskarvad(a)redhat.com> - 1.3-1
- New version
Resolves: rhbz#2018669
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2092896 - CVE-2021-42612 halibut: use-after-free in cleanup_index() in
index.c
https://bugzilla.redhat.com/show_bug.cgi?id=2092896
[ 2 ] Bug #2092899 - CVE-2021-42613 halibut: double free in cleanup_index() in index.c
https://bugzilla.redhat.com/show_bug.cgi?id=2092899
[ 3 ] Bug #2092902 - CVE-2021-42614 halibut: use-after-free in info_width_internal() in
bk_info.c
https://bugzilla.redhat.com/show_bug.cgi?id=2092902
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-9a9abd295b' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------