--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-d4d1e89e61
2024-12-12 02:29:32.892756+00:00
--------------------------------------------------------------------------------

Name        : iaito
Product     : Fedora 40
Version     : 5.9.9
Release     : 2.fc40
URL         : https://radare.org/n/iaito.html
Summary     : GUI for radare2 reverse engineering framework
Description :
iaito is a Qt and C++ GUI for radare2.
It is the continuation of Cutter before the fork to keep radare2 as backend.
Its goal is making an advanced, customizable and FOSS reverse-engineering
platform while keeping the user experience at mind.
The iaito is created by reverse engineers for reverse engineers.
Focus on supporting latest version of radare2.
Recommend the use of system installed libraries/radare2.
Closer integration between r2 and the UI.

--------------------------------------------------------------------------------
Update Information:

Bump radare2 to 5.9.8, iaito to 5.9.9, fixes CVE-2024-11858
--------------------------------------------------------------------------------
ChangeLog:

* Sat Nov 30 2024 Michal Ambroz  - 5.9.9-2
- iaito rebuild
* Mon Nov 25 2024 Michal Ambroz  - 5.9.9-1
- bump to 5.9.9
* Thu Oct 31 2024 Michal Ambroz  - 5.9.6-2
- fix epel8 build
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #2313891 - iaito: fails to install from epel9
        https://bugzilla.redhat.com/show_bug.cgi?id=2313891
  [ 2 ] Bug #2327286 - iaito-5.9.9 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=2327286
  [ 3 ] Bug #2327308 - radare2-5.9.8 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=2327308
  [ 4 ] Bug #2329104 - CVE-2024-11858 radare2: Command Injection via Pebble Application Files in Radare2 [epel-8]
        https://bugzilla.redhat.com/show_bug.cgi?id=2329104
  [ 5 ] Bug #2329105 - CVE-2024-11858 radare2: Command Injection via Pebble Application Files in Radare2 [epel-9]
        https://bugzilla.redhat.com/show_bug.cgi?id=2329105
  [ 6 ] Bug #2329107 - CVE-2024-11858 radare2: Command Injection via Pebble Application Files in Radare2 [fedora-40]
        https://bugzilla.redhat.com/show_bug.cgi?id=2329107
  [ 7 ] Bug #2329108 - CVE-2024-11858 radare2: Command Injection via Pebble Application Files in Radare2 [fedora-41]
        https://bugzilla.redhat.com/show_bug.cgi?id=2329108
  [ 8 ] Bug #2329622 - F41FailsToInstall: iaito
        https://bugzilla.redhat.com/show_bug.cgi?id=2329622
  [ 9 ] Bug #2329623 - F40FailsToInstall: iaito
        https://bugzilla.redhat.com/show_bug.cgi?id=2329623
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-d4d1e89e61' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

-- 
_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue