Fedora alert FEDORA-2025-9b6b49071f (imhex)
| From: | updates--- via package-announce <package-announce@lists.fedoraproject.org> | |
| To: | package-announce@lists.fedoraproject.org | |
| Subject: | [SECURITY] Fedora 42 Update: imhex-1.37.4-3.fc42 | |
| Date: | Wed, 10 Dec 2025 00:48:29 +0000 | |
| Message-ID: | <20251210004829.F2F317960B@bastion01.rdu3.fedoraproject.org> | |
| Archive-link: | Article |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-9b6b49071f 2025-12-10 00:47:19.391492+00:00 -------------------------------------------------------------------------------- Name : imhex Product : Fedora 42 Version : 1.37.4 Release : 3.fc42 URL : https://imhex.werwolv.net/ Summary : A hex editor for reverse engineers and programmers Description : ImHex is a Hex Editor, a tool to display, decode and analyze binary data to reverse engineer their format, extract informations or patch values in them. What makes ImHex special is that it has many advanced features that can often only be found in paid applications. Such features are a completely custom binary template and pattern language to decode and highlight structures in the data, a graphical node-based data processor to pre-process values before they're displayed, a disassembler, diffing support, bookmarks and much much more. At the same time ImHex is completely free and open source under the GPLv2 language. -------------------------------------------------------------------------------- Update Information: Unbundle plutovg from lunasvg, this avoids shipping a duplicate library with conflicting files. Update lunasvg to consume the plutovg version already available in the repositories and to fix various CVEs. Rebuild imhex for the updated lunasvg. -------------------------------------------------------------------------------- ChangeLog: * Mon Dec 1 2025 Simone Caronni <negativo17@gmail.com> - 1.37.4-3 - Rebuild for updated build requirements. -------------------------------------------------------------------------------- References: [ 1 ] Bug #2295891 - lunasvg-3.5.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2295891 [ 2 ] Bug #2341675 - CVE-2024-57719 CVE-2024-57720 CVE-2024-57721 CVE-2024-57722 CVE-2024-57723 CVE-2024-57724 lunasvg: various flaws [epel-9] https://bugzilla.redhat.com/show_bug.cgi?id=2341675 [ 3 ] Bug #2343567 - CVE-2024-55456 lunasvg: From CVEorg collector [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2343567 [ 4 ] Bug #2400407 - file conflict between plutovg-devel and lunasvg-devel https://bugzilla.redhat.com/show_bug.cgi?id=2400407 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-9b6b49071f' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgr... All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-cond... List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-ann... Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue