Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2022:3455-1

Опубликовано: 28 сент. 2022
Источник: suse-cvrf

Описание

Security update for libostree

This update for libostree fixes the following issues:

  • CVE-2014-9862: Fixed arbitrary write on heap vulnerability (bsc#1201770).

Список пакетов

SUSE Enterprise Storage 6
libostree-2018.9-150100.7.4.1
libostree-1-1-2018.9-150100.7.4.1
libostree-devel-2018.9-150100.7.4.1
typelib-1_0-OSTree-1_0-2018.9-150100.7.4.1
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS
libostree-2018.9-150100.7.4.1
libostree-1-1-2018.9-150100.7.4.1
libostree-devel-2018.9-150100.7.4.1
typelib-1_0-OSTree-1_0-2018.9-150100.7.4.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS
libostree-2018.9-150100.7.4.1
libostree-1-1-2018.9-150100.7.4.1
libostree-devel-2018.9-150100.7.4.1
typelib-1_0-OSTree-1_0-2018.9-150100.7.4.1
SUSE Linux Enterprise Server 15 SP1-BCL
libostree-2018.9-150100.7.4.1
libostree-1-1-2018.9-150100.7.4.1
libostree-devel-2018.9-150100.7.4.1
typelib-1_0-OSTree-1_0-2018.9-150100.7.4.1
SUSE Linux Enterprise Server 15 SP1-LTSS
libostree-2018.9-150100.7.4.1
libostree-1-1-2018.9-150100.7.4.1
libostree-devel-2018.9-150100.7.4.1
typelib-1_0-OSTree-1_0-2018.9-150100.7.4.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1
libostree-2018.9-150100.7.4.1
libostree-1-1-2018.9-150100.7.4.1
libostree-devel-2018.9-150100.7.4.1
typelib-1_0-OSTree-1_0-2018.9-150100.7.4.1

Ссылки

Описание

Integer signedness error in bspatch.c in bspatch in bsdiff, as used in Apple OS X before 10.11.6 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a crafted patch file.

Затронутые продукты
SUSE Enterprise Storage 6:libostree-1-1-2018.9-150100.7.4.1
SUSE Enterprise Storage 6:libostree-2018.9-150100.7.4.1
SUSE Enterprise Storage 6:libostree-devel-2018.9-150100.7.4.1
SUSE Enterprise Storage 6:typelib-1_0-OSTree-1_0-2018.9-150100.7.4.1
Ссылки
Уязвимость SUSE-SU-2022:3455-1