Описание
Security update for libmspack
This update for libmspack fixes the following issues:
- CVE-2018-14681: Bad KWAJ file header extensions could cause a one or two byte overwrite. (bsc#1103032)
- CVE-2018-14682: There is an off-by-one error in the TOLOWER() macro for CHM decompression. (bsc#1103032)
Список пакетов
SUSE Linux Enterprise Server 12 SP5
libmspack0-0.4-15.10.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
libmspack0-0.4-15.10.1
SUSE Linux Enterprise Software Development Kit 12 SP5
libmspack-devel-0.4-15.10.1
Ссылки
- Link for SUSE-SU-2021:2765-1
- E-Mail link for SUSE-SU-2021:2765-1
- SUSE Security Ratings
- SUSE Bug 1103032
- SUSE CVE CVE-2018-14681 page
- SUSE CVE CVE-2018-14682 page
Описание
An issue was discovered in kwajd_read_headers in mspack/kwajd.c in libmspack before 0.7alpha. Bad KWAJ file header extensions could cause a one or two byte overwrite.
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:libmspack0-0.4-15.10.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5:libmspack0-0.4-15.10.1
SUSE Linux Enterprise Software Development Kit 12 SP5:libmspack-devel-0.4-15.10.1
Ссылки
- CVE-2018-14681
- SUSE Bug 1102922
- SUSE Bug 1103032
- SUSE Bug 1103040
Описание
An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the TOLOWER() macro for CHM decompression.
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:libmspack0-0.4-15.10.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5:libmspack0-0.4-15.10.1
SUSE Linux Enterprise Software Development Kit 12 SP5:libmspack-devel-0.4-15.10.1
Ссылки
- CVE-2018-14682
- SUSE Bug 1102922
- SUSE Bug 1103032
- SUSE Bug 1103040