[SECURITY] Fedora 36 Update: cloudcompare-2.11.3-4.fc36
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-8d01b8b6d3
2022-09-09 11:21:56.289522
--------------------------------------------------------------------------------
Name : cloudcompare
Product : Fedora 36
Version : 2.11.3
Release : 4.fc36
URL : http://www.cloudcompare.org/
Summary : 3D point cloud and mesh processing software
Description :
CloudCompare is a 3D point cloud (and triangular mesh) processing software.
It has been originally designed to perform comparison between two 3D points
clouds (such as the ones obtained with a laser scanner) or between a point
cloud and a triangular mesh.
It relies on a specific octree structure that enables great performances in
this particular function. It was also meant to deal with huge point clouds
(typically more than 10 millions points, and up to 120 millions with 2 Gb of
memory).
Afterwards, it has been extended to a more generic point cloud processing
software, including many advanced algorithms (registration, resampling,
color/normal/scalar fields handling, statistics computation, sensor
management, interactive or automatic segmentation, display enhancement...).
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2021-21897
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 25 2022 Miro Hron��ok <mhroncok(a)redhat.com> - 2.11.3-4
- Security fix for CVE-2021-21897
- Fixes: rhbz#2080986
* Wed Jul 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.11.3-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Sat May 21 2022 Sandro Mani <manisandro(a)gmail.com> - 2.11.3-2
- Rebuild for gdal-3.5.0 and/or openjpeg-2.5.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2080983 - CVE-2021-21897 libdxflib: heap-based buffer overflow in the
DL_Dxf:handleLWPolylineData function
https://bugzilla.redhat.com/show_bug.cgi?id=2080983
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-8d01b8b6d3' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------