Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:0783-1

Опубликовано: 23 мар. 2018
Источник: suse-cvrf

Описание

Security update for libvorbis

This update for libvorbis fixes the following issues:

  • CVE-2018-5146: Fixed out of bounds memory write while processing Vorbis audio data (bsc#1085687).

Список пакетов

SUSE Linux Enterprise Server 11 SP4
libvorbis-1.2.0-79.20.6.1
libvorbis-32bit-1.2.0-79.20.6.1
libvorbis-doc-1.2.0-79.20.6.1
libvorbis-x86-1.2.0-79.20.6.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4
libvorbis-1.2.0-79.20.6.1
libvorbis-32bit-1.2.0-79.20.6.1
libvorbis-doc-1.2.0-79.20.6.1
libvorbis-x86-1.2.0-79.20.6.1
SUSE Linux Enterprise Software Development Kit 11 SP4
libvorbis-devel-1.2.0-79.20.6.1

Ссылки

Описание

An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnerability affects Firefox < 59.0.1, Firefox ESR < 52.7.2, and Thunderbird < 52.7.

Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:libvorbis-1.2.0-79.20.6.1
SUSE Linux Enterprise Server 11 SP4:libvorbis-32bit-1.2.0-79.20.6.1
SUSE Linux Enterprise Server 11 SP4:libvorbis-doc-1.2.0-79.20.6.1
SUSE Linux Enterprise Server 11 SP4:libvorbis-x86-1.2.0-79.20.6.1
Ссылки