Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2020:0746-1

Опубликовано: 31 мая 2020
Источник: suse-cvrf

Описание

Security update for libmspack

This update for libmspack fixes the following issues:

Security issue fixed:

  • CVE-2019-1010305: Fixed a buffer overflow triggered by a crafted chm file which could have led to information disclosure (bsc#1141680).

Other issue addressed:

  • Enable build-time tests (bsc#1130489)

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.1
libmspack-devel-0.6-lp151.4.3.1
libmspack0-0.6-lp151.4.3.1
libmspack0-32bit-0.6-lp151.4.3.1
mspack-tools-0.6-lp151.4.3.1

Ссылки

Описание

libmspack 0.9.1alpha is affected by: Buffer Overflow. The impact is: Information Disclosure. The component is: function chmd_read_headers() in libmspack(file libmspack/mspack/chmd.c). The attack vector is: the victim must open a specially crafted chm file. The fixed version is: after commit 2f084136cfe0d05e5bf5703f3e83c6d955234b4d.

Затронутые продукты
openSUSE Leap 15.1:libmspack-devel-0.6-lp151.4.3.1
openSUSE Leap 15.1:libmspack0-0.6-lp151.4.3.1
openSUSE Leap 15.1:libmspack0-32bit-0.6-lp151.4.3.1
openSUSE Leap 15.1:mspack-tools-0.6-lp151.4.3.1
Ссылки