Описание
Security update for libvorbis
This update for libvorbis fixes the following issues:
The following security issue was fixed:
- Fixed the validation of channels in mapping0_forward(), which previously allowed remote attackers to cause a denial of service via specially crafted files (CVE-2018-10392, bsc#1091070)
This update was imported from the SUSE:SLE-12:Update update project.
Список пакетов
openSUSE Leap 42.3
libvorbis-1.3.3-17.1
libvorbis-devel-1.3.3-17.1
libvorbis-doc-1.3.3-17.1
libvorbis0-1.3.3-17.1
libvorbis0-32bit-1.3.3-17.1
libvorbisenc2-1.3.3-17.1
libvorbisenc2-32bit-1.3.3-17.1
libvorbisfile3-1.3.3-17.1
libvorbisfile3-32bit-1.3.3-17.1
Ссылки
- E-Mail link for openSUSE-SU-2018:1622-1
- SUSE Security Ratings
Описание
mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service (heap-based buffer overflow or over-read) or possibly have unspecified other impact via a crafted file.
Затронутые продукты
openSUSE Leap 42.3:libvorbis-1.3.3-17.1
openSUSE Leap 42.3:libvorbis-devel-1.3.3-17.1
openSUSE Leap 42.3:libvorbis-doc-1.3.3-17.1
openSUSE Leap 42.3:libvorbis0-1.3.3-17.1
Ссылки
- CVE-2018-10392
- SUSE Bug 1091070