FEDORA-2022-ec48d2c1b4
Packages in this update:
firefox-107.0-4.fc35
Update description:
Fixed VA-API playback artifacts (mzbz#1779186)
New upstream version (107.0)
firefox-107.0-4.fc35
Fixed VA-API playback artifacts (mzbz#1779186)
New upstream version (107.0)
qpress-20220819-3.el8
Security fix for CVE-2022-45866
qpress-20220819-1.el9
Security fix for CVE-2022-45866
qpress-20220819-1.fc35
Security fix for CVE-2022-45866
qpress-20220819-1.fc36
Security fix for CVE-2022-45866
qpress-20220819-1.fc37
Security fix for CVE-2022-45866
qpress-20220819-1.fc38
Automatic update for qpress-20220819-1.fc38.
* Fri Nov 25 2022 Davide Cavalca <dcavalca@fedoraproject.org> 20220819-1
– Switch to new upstream and update to 20220819 (Fixes: RHBZ#2147535,
RHBZ#2147537)
It was discovered that a buffer overflow in GraphicsMagick, a collection
of image processing tools, could potentially result in the execution of
arbitrary code when processing a malformed MIFF image.
It was discovered that LibTIFF incorrectly handled certain malformed
images. If a user or automated system were tricked into opening a specially
crafted image, a remote attacker could crash the application, leading to a
denial of service, or possibly execute arbitrary code with user privileges.
It was discovered that JBIG-KIT incorrectly handled decoding certain large
image files. If a user or automated system using JBIG-KIT were tricked into
opening a specially crafted file, an attacker could possibly use this issue
to cause a denial of service.