Fedora 26 : capnproto (2017-0be0f172f8)

Update to 0.6.1 to fix CVE-2017-7892 and FTBFS on F26+. In addition, with the build switched from autotools to CMake, both pkgconfig files and CMake configuration scripts are now provided in capnproto-devel. Note that Tenable Network Security has extracted the preceding description block directly...

Fedora 24 : capnproto (2017-adc3d69650)

Update to 0.5.3.1 to fix CVE-2017-7892. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 25 : capnproto (2017-2b328c7ce9)

Update to 0.5.3.1 to fix CVE-2017-7892. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

CVE-2017-7892

Sandstorm Cap'n Proto before 0.5.3.1 allows remote crashes related to a compiler optimization. A remote attacker can trigger a segfault in a 32-bit libcapnp application because Cap'n Proto relies on pointer arithmetic calculations that overflow. An example compiler with optimization that elides a...

CVE-2017-7892

CVE-2017-7892 affects Sandstorm Cap'n Proto / capnpproto prior to 0.5.3.1. The vulnerability stems from compiler optimization interacting with Cap'n Proto’s pointer arithmetic, allowing overflow in 32-bit builds and leading to remote crashes (segmentation fault) when processing crafted far pointe...

CVE-2017-7892

Sandstorm Cap'n Proto before 0.5.3.1 allows remote crashes related to a compiler optimization. A remote attacker can trigger a segfault in a 32-bit libcapnp application because Cap'n Proto relies on pointer arithmetic calculations that overflow. An example compiler with optimization that elides a...