Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 22 FreeCAD Security Advisory: Moderate Risk of Remote Code Execution

fedora
Calendar Grey June 10, 2015
Dist Fedora Esm H88
This Arch Linux upgrade addresses a vulnerability in GIMP and rectifies dependency issues. Discover the best practices for a smooth update process.
Rolled back 0.15 update for f20 & f21 due to library conflict

Summary

FreeCAD is a general purpose Open Source 3D CAD/MCAD/CAx/CAE/PLM modeler, aimed

directly at mechanical engineering and product design but also fits a wider

range of uses in engineering, such as architecture or other engineering

specialties. It is a feature-based parametric modeler with a modular software

architecture which makes it easy to provide additional functionality without

modifying the core system.

Update Information:

Rolled back 0.15 update for f20 & f21 due to library conflict.

Also addresses a security vulnerability.

Topics%20covered

Topics Covered

security advisory moderate security update Fedora remote execution FreeCAD library conflict

Change Log

* Tue May 19 2015 Richard Shaw - 1:0.15-4 - Bump Epoch to downgrade to 0.14 for Fedora 21 and below due to Coin2/Coin3 library mismatch between Freecad & python-pivy (BZ#1221713).

References


[ 1 ] Bug #1154608 - freecad: potential remote code execution when opening DXF files https://bugzilla.redhat.com/show_bug.cgi?id=1154608

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update freecad' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
important
Lowest
Low
Medium
High
Critical

Name: freecad
Product: Fedora 22
Version: 0.15
Release: 4.fc22
URL: https://sourceforge.net/projects/free-cad/
Summary: A general purpose 3D CAD modeler

Topics%20covered

Topics Covered

security advisory moderate security update Fedora remote execution FreeCAD library conflict

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here