Описание
Security update for bzip2
This update for bzip2 fixes the following issues:
Security issue fixed:
- CVE-2016-3189: Fixed a use-after-free in bzip2recover (bsc#985657).
This update was imported from the SUSE:SLE-15:Update update project.
Список пакетов
openSUSE Leap 15.1
bzip2-1.0.6-lp151.5.3.1
bzip2-doc-1.0.6-lp151.5.3.1
libbz2-1-1.0.6-lp151.5.3.1
libbz2-1-32bit-1.0.6-lp151.5.3.1
libbz2-devel-1.0.6-lp151.5.3.1
libbz2-devel-32bit-1.0.6-lp151.5.3.1
Ссылки
- E-Mail link for openSUSE-SU-2019:1435-1
- SUSE Security Ratings
- SUSE Bug 985657
- SUSE CVE CVE-2016-3189 page
Описание
Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.
Затронутые продукты
openSUSE Leap 15.1:bzip2-1.0.6-lp151.5.3.1
openSUSE Leap 15.1:bzip2-doc-1.0.6-lp151.5.3.1
openSUSE Leap 15.1:libbz2-1-1.0.6-lp151.5.3.1
openSUSE Leap 15.1:libbz2-1-32bit-1.0.6-lp151.5.3.1
Ссылки
- CVE-2016-3189
- SUSE Bug 985657