Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2019:1120-1

Опубликовано: 02 апр. 2019
Источник: suse-cvrf

Описание

Security update for libgxps

This update for libgxps fixes the following issues:

  • CVE-2018-10733: Fixed a heap-based buffer over-read issue in ft_font_face_hash (bsc#1092125).

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.0
libgxps-devel-0.3.0-lp150.3.3.2
libgxps-tools-0.3.0-lp150.3.3.2
libgxps2-0.3.0-lp150.3.3.2
typelib-1_0-GXPS-0_1-0.3.0-lp150.3.3.2

Ссылки

Описание

There is a heap-based buffer over-read in the function ft_font_face_hash of gxps-fonts.c in libgxps through 0.3.0. A crafted input will lead to a remote denial of service attack.

Затронутые продукты
openSUSE Leap 15.0:libgxps-devel-0.3.0-lp150.3.3.2
openSUSE Leap 15.0:libgxps-tools-0.3.0-lp150.3.3.2
openSUSE Leap 15.0:libgxps2-0.3.0-lp150.3.3.2
openSUSE Leap 15.0:typelib-1_0-GXPS-0_1-0.3.0-lp150.3.3.2
Ссылки
Уязвимость openSUSE-SU-2019:1120-1