Описание
Security update for bsdiff
This update for bsdiff fixes the following issues:
- CVE-2014-9862: Improper checking of input allows arbitrary write on heap (boo#990660)
Список пакетов
openSUSE Leap 42.1
bsdiff-4.3-9.2
Ссылки
- E-Mail link for openSUSE-SU-2016:1977-1
- SUSE Security Ratings
Описание
Integer signedness error in bspatch.c in bspatch in bsdiff, as used in Apple OS X before 10.11.6 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a crafted patch file.
Затронутые продукты
openSUSE Leap 42.1:bsdiff-4.3-9.2
Ссылки
- CVE-2014-9862
- SUSE Bug 1173974
- SUSE Bug 990660