Описание
Security update for libvorbis
This update for libvorbis fixes the following issues:
- CVE-2018-5146: Fixed out of bounds memory write while processing Vorbis audio data (bsc#1085687).
Список пакетов
SUSE Linux Enterprise Desktop 12 SP2
libvorbis0-1.3.3-10.6.1
libvorbis0-32bit-1.3.3-10.6.1
libvorbisenc2-1.3.3-10.6.1
libvorbisenc2-32bit-1.3.3-10.6.1
libvorbisfile3-1.3.3-10.6.1
libvorbisfile3-32bit-1.3.3-10.6.1
SUSE Linux Enterprise Desktop 12 SP3
libvorbis0-1.3.3-10.6.1
libvorbis0-32bit-1.3.3-10.6.1
libvorbisenc2-1.3.3-10.6.1
libvorbisenc2-32bit-1.3.3-10.6.1
libvorbisfile3-1.3.3-10.6.1
libvorbisfile3-32bit-1.3.3-10.6.1
SUSE Linux Enterprise Server 12 SP2
libvorbis-doc-1.3.3-10.6.1
libvorbis0-1.3.3-10.6.1
libvorbis0-32bit-1.3.3-10.6.1
libvorbisenc2-1.3.3-10.6.1
libvorbisenc2-32bit-1.3.3-10.6.1
libvorbisfile3-1.3.3-10.6.1
libvorbisfile3-32bit-1.3.3-10.6.1
SUSE Linux Enterprise Server 12 SP3
libvorbis-doc-1.3.3-10.6.1
libvorbis0-1.3.3-10.6.1
libvorbis0-32bit-1.3.3-10.6.1
libvorbisenc2-1.3.3-10.6.1
libvorbisenc2-32bit-1.3.3-10.6.1
libvorbisfile3-1.3.3-10.6.1
libvorbisfile3-32bit-1.3.3-10.6.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
libvorbis-doc-1.3.3-10.6.1
libvorbis0-1.3.3-10.6.1
libvorbisenc2-1.3.3-10.6.1
libvorbisfile3-1.3.3-10.6.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2
libvorbis-doc-1.3.3-10.6.1
libvorbis0-1.3.3-10.6.1
libvorbis0-32bit-1.3.3-10.6.1
libvorbisenc2-1.3.3-10.6.1
libvorbisenc2-32bit-1.3.3-10.6.1
libvorbisfile3-1.3.3-10.6.1
libvorbisfile3-32bit-1.3.3-10.6.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
libvorbis-doc-1.3.3-10.6.1
libvorbis0-1.3.3-10.6.1
libvorbis0-32bit-1.3.3-10.6.1
libvorbisenc2-1.3.3-10.6.1
libvorbisenc2-32bit-1.3.3-10.6.1
libvorbisfile3-1.3.3-10.6.1
libvorbisfile3-32bit-1.3.3-10.6.1
SUSE Linux Enterprise Software Development Kit 12 SP2
libvorbis-devel-1.3.3-10.6.1
SUSE Linux Enterprise Software Development Kit 12 SP3
libvorbis-devel-1.3.3-10.6.1
Ссылки
- Link for SUSE-SU-2018:0784-1
- E-Mail link for SUSE-SU-2018:0784-1
- SUSE Security Ratings
- SUSE Bug 1085687
- SUSE CVE CVE-2018-5146 page
Описание
An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnerability affects Firefox < 59.0.1, Firefox ESR < 52.7.2, and Thunderbird < 52.7.
Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP2:libvorbis0-1.3.3-10.6.1
SUSE Linux Enterprise Desktop 12 SP2:libvorbis0-32bit-1.3.3-10.6.1
SUSE Linux Enterprise Desktop 12 SP2:libvorbisenc2-1.3.3-10.6.1
SUSE Linux Enterprise Desktop 12 SP2:libvorbisenc2-32bit-1.3.3-10.6.1
Ссылки
- CVE-2018-5146
- SUSE Bug 1085671
- SUSE Bug 1085687
- SUSE Bug 1180395