#21 Security fix for CVE-2022-28041
Merged 2 years ago by churchyard. Opened 2 years ago by music.
rpms/ music/CuraEngine cve-2022-28041  into  rawhide

file modified
+7 -4
@@ -1,7 +1,7 @@ 

  Name:           CuraEngine

  Epoch:          1

  Version:        4.13.1

- Release:        1%{?dist}

+ Release:        2%{?dist}

  Summary:        Engine for processing 3D models into G-code instructions for 3D printers

  License:        AGPLv3+

  URL:            https://github.com/Ultimaker/%{name}
@@ -17,9 +17,9 @@ 

  BuildRequires:  git-core

  

  # Header-only package; -static version is for tracking per guidelines

- # stb_image 2.27-0.7 is the minimum EVR to contain fixes for all of

- # CVE-2021-28021, CVE-2021-42715, and CVE-2021-42716.

- BuildRequires:  stb_image-devel >= 2.27-0.7

+ # stb_image 2.27^20210910gitaf1a5bc-0.2 is the minimum EVR to contain fixes for

+ # all of CVE-2021-28021, CVE-2021-42715, CVE-2021-42716, and CVE-2022-28041.

+ BuildRequires:  stb_image-devel >= 2.27^20210910gitaf1a5bc-0.2

  BuildRequires:  stb_image-static

  

  Patch0:         %{name}-static-libstdcpp.patch
@@ -67,6 +67,9 @@ 

  %{_bindir}/%{name}

  

  %changelog

+ * Sat Apr 23 2022 Benjamin A. Beasley <code@musicinmybrain.net> - 1:4.13.1-2

+ - Security fix for CVE-2022-28041

+ 

  * Tue Feb 01 2022 Gabriel Féron <feron.gabriel@gmail.com> - 1:4.13.1-1

  - Update to 4.13.1

  

Increases the minimum stb_image version to ensure a fix for CVE-2022-28041 is present.

Since the necessary version of stb is in all Fedora releases (either stable, or testing with a buildroot override) with the same EVR, you can backport this to all branches.

Pull-Request has been merged by churchyard

2 years ago
Metadata