Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2022:4287-1

Опубликовано: 29 нояб. 2022
Источник: suse-cvrf

Описание

Security update for libmspack

This update for libmspack fixes the following issues:

  • CVE-2018-18586: Add leading slash protection to chmextract. (bsc#1113040)

Список пакетов

SUSE Linux Enterprise Server 12 SP5
libmspack0-0.4-15.13.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
libmspack0-0.4-15.13.1
SUSE Linux Enterprise Software Development Kit 12 SP5
libmspack-devel-0.4-15.13.1

Ссылки

Описание

** DISPUTED ** chmextract.c in the chmextract sample program, as distributed with libmspack before 0.8alpha, does not protect against absolute/relative pathnames in CHM files, leading to Directory Traversal. NOTE: the vendor disputes that this is a libmspack vulnerability, because chmextract.c was only intended as a source-code example, not a supported application.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:libmspack0-0.4-15.13.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5:libmspack0-0.4-15.13.1
SUSE Linux Enterprise Software Development Kit 12 SP5:libmspack-devel-0.4-15.13.1
Ссылки