[SECURITY] Fedora 34 Update: CGAL-5.2.1-1.fc34
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-0d42c7cb33
2021-03-23 00:15:16.316684
--------------------------------------------------------------------------------
Name : CGAL
Product : Fedora 34
Version : 5.2.1
Release : 1.fc34
URL : http://www.cgal.org/
Summary : Computational Geometry Algorithms Library
Description :
Libraries for CGAL applications.
CGAL is a collaborative effort of several sites in Europe and
Israel. The goal is to make the most important of the solutions and
methods developed in computational geometry available to users in
industry and academia in a C++ library. The goal is to provide easy
access to useful, reliable geometric algorithms.
--------------------------------------------------------------------------------
Update Information:
New upstream release CGAL-5.2.1. Security fix for CVE-2020-28601,
CVE-2020-28636, CVE-2020-35628, CVE-2020-35636.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 17 2021 Laurent Rineau <laurent.rineau(a)cgal.org> - 5.2.1-1
- New upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1939901 - CVE-2020-28601 CGAL: ode execution vulnerability may lead to oob
read
https://bugzilla.redhat.com/show_bug.cgi?id=1939901
[ 2 ] Bug #1939904 - CVE-2020-28636 CGAL: code execution vulnerability may lead to oob
read
https://bugzilla.redhat.com/show_bug.cgi?id=1939904
[ 3 ] Bug #1939905 - CVE-2020-35628 CGAL: code execution vulnerability may lead to oob
read
https://bugzilla.redhat.com/show_bug.cgi?id=1939905
[ 4 ] Bug #1939906 - CVE-2020-35636 CGAL: code execution vulnerability may lead to oob
read
https://bugzilla.redhat.com/show_bug.cgi?id=1939906
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-0d42c7cb33' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------