Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2020:0677-1

Опубликовано: 22 мая 2020
Источник: suse-cvrf

Описание

Security update for file

This update for file fixes the following issues:

Security issues fixed:

  • CVE-2019-18218: Fixed a heap-based buffer overflow in cdf_read_property_info() (bsc#1154661).

Non-security issue fixed:

  • Fixed broken '--help' output (bsc#1169512).

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.1
file-5.32-lp151.8.3.1
file-devel-5.32-lp151.8.3.1
file-devel-32bit-5.32-lp151.8.3.1
file-magic-5.32-lp151.8.3.1
libmagic1-5.32-lp151.8.3.1
libmagic1-32bit-5.32-lp151.8.3.1
python2-magic-5.32-lp151.8.3.1
python3-magic-5.32-lp151.8.3.1

Ссылки

Описание

cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte out-of-bounds write).

Затронутые продукты
openSUSE Leap 15.1:file-5.32-lp151.8.3.1
openSUSE Leap 15.1:file-devel-32bit-5.32-lp151.8.3.1
openSUSE Leap 15.1:file-devel-5.32-lp151.8.3.1
openSUSE Leap 15.1:file-magic-5.32-lp151.8.3.1
Ссылки