Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora 40 Advisory 2024-86d287b270: Critical Editorconfig Buffer Overflow

fedora
Calendar Grey April 19, 2024
Dist Fedora Esm H88
The recent CentOS security patch focuses on vulnerabilities in libxml2 2.9.10, improving resilience against potential attacks.
Update to 0.12.7: fix pointer overflow in STRING_CAT; fix a few more stack buffer overflows.

Summary

EditorConfig makes it easy to maintain the correct coding style when

switching between different text editors and between different projects.

The EditorConfig project maintains a file format and plugins for various

text editors which allow this file format to be read and used by those

editors.

Update Information:

Update to 0.12.7: fix pointer overflow in STRING_CAT; fix a few more stack buffer overflows.

Topics%20covered

Topics Covered

security advisory fedora buffer overflow critical severity editorconfig

Change Log

* Wed Apr 3 2024 Benjamin A. Beasley - 0.12.7-1 - Update to 0.12.7 (close RHBZ#2272370) * Fri Mar 8 2024 Yaakov Selkowitz - 0.12.6-5 - Use bundled uthash in RHEL builds

References


[ 1 ] Bug #2272370 - editorconfig-0.12.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=2272370

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-86d287b270' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: editorconfig
Product: Fedora 40
Version: 0.12.7
Release: 1.fc40
URL: https://github.com/editorconfig/editorconfig-core-c
Summary: Parser for EditorConfig files written in C

Topics%20covered

Topics Covered

security advisory fedora buffer overflow critical severity editorconfig

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here