Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2018:1038-1

Опубликовано: 20 апр. 2018
Источник: suse-cvrf

Описание

Security update for cfitsio

This update for cfitsio fixes the following issues:

Security issues fixed:

  • CVE-2018-1000166: Unsafe use of sprintf() can allow a remote unauthenticated attacker to execute arbitrary code (boo#1088590)

This update to version 3.430 also contains a number of upstream bug fixes.

The following tracked packaging changes are included:

  • boo#1082318: package licence text as license, not as documentation

Список пакетов

openSUSE Leap 42.3
cfitsio-3.430-4.3.1
cfitsio-devel-3.430-4.3.1
cfitsio-devel-doc-3.430-4.3.1
libcfitsio5-3.430-4.3.1

Ссылки

Описание

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-3848 and CVE-2018-3849. Reason: This candidate is a reservation duplicate of CVE-2018-3848 and CVE-2018-3849. Notes: All CVE users should reference CVE-2018-3848 and CVE-2018-3849 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

Затронутые продукты
openSUSE Leap 42.3:cfitsio-3.430-4.3.1
openSUSE Leap 42.3:cfitsio-devel-3.430-4.3.1
openSUSE Leap 42.3:cfitsio-devel-doc-3.430-4.3.1
openSUSE Leap 42.3:libcfitsio5-3.430-4.3.1
Ссылки