[SECURITY] Fedora 35 Update: openscad-2021.01-8.fc35
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-3012e64f8c
2022-04-14 16:06:11.136342
--------------------------------------------------------------------------------
Name : openscad
Product : Fedora 35
Version : 2021.01
Release : 8.fc35
URL : http://www.openscad.org/
Summary : The Programmers Solid 3D CAD Modeller
Description :
OpenSCAD is a software for creating solid 3D CAD objects.
Unlike most free software for creating 3D models (such as the famous
application Blender) it does not focus on the artistic aspects of 3D
modeling but instead on the CAD aspects. Thus it might be the application
you are looking for when you are planning to create 3D models of machine
parts but pretty sure is not what you are looking for when you are more
interested in creating computer-animated movies.
--------------------------------------------------------------------------------
Update Information:
Security fixes for CVE-2022-0496 and CVE-2022-0497
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 5 2022 Lum��r Balhar <lbalhar(a)redhat.com> - 2021.01-8
- Security fixes for CVE-2022-0496 and CVE-2022-0497
- Fixes: rhbz#2050696 rhbz#2050700
* Fri Feb 11 2022 Tom Callaway <spot(a)fedoraproject.org> - 2021.01-7
- apply upstream fix for build issue with overloaded join()
- fix build against new CGAL 5.4
* Thu Feb 10 2022 Orion Poplawski <orion(a)nwra.com> - 2021.01-6
- Rebuild for glew 2.2
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2021.01-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2050695 - CVE-2022-0496 openscad: Out-of-bounds memory access in DXF loader
https://bugzilla.redhat.com/show_bug.cgi?id=2050695
[ 2 ] Bug #2050699 - CVE-2022-0497 openscad: Out-of-bounds memory access in comment
parser
https://bugzilla.redhat.com/show_bug.cgi?id=2050699
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-3012e64f8c' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------