Fedora Linux 8578 Published by

A radare2 security update has been released for Fedora 38.



[SECURITY] Fedora 38 Update: radare2-5.8.6-1.fc38


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-5d5aa8b27a
2023-06-18 01:29:01.914080
--------------------------------------------------------------------------------

Name : radare2
Product : Fedora 38
Version : 5.8.6
Release : 1.fc38
URL : https://radare.org/
Summary : The reverse engineering framework
Description :
The radare2 is a reverse-engineering framework that is multi-architecture,
multi-platform, and highly scriptable. Radare2 provides a hexadecimal
editor, wrapped I/O, file system support, debugger support, diffing
between two functions or binaries, and code analysis at opcode,
basic block, and function levels.

--------------------------------------------------------------------------------
Update Information:

Bump to 5.8.6
--------------------------------------------------------------------------------
ChangeLog:

* Tue May 23 2023 Michal Ambroz 5.8.6-1
- bump to 5.8.6
* Sat Mar 25 2023 Michal Ambroz 5.8.5-0.3
- 5.8.5 rebuild from git, patched for segfault
* Wed Mar 22 2023 Michal Ambroz 5.8.4-2
- patch for segfault in sdb_hash
* Thu Mar 16 2023 Michal Ambroz 5.8.4-1
- bump to 5.8.4
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2157016 - CVE-2022-4843 radare2: Fix null deref in io.bank [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2157016
[ 2 ] Bug #2170036 - syscall detection is broken
https://bugzilla.redhat.com/show_bug.cgi?id=2170036
[ 3 ] Bug #2178851 - radare2-5.8.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2178851
[ 4 ] Bug #2179047 - iaito-5.8.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2179047
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-5d5aa8b27a' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------