SUSE alert SUSE-SU-2020:1493-1 (libmspack)
| From: | sle-security-updates@lists.suse.com | |
| To: | sle-security-updates@lists.suse.com | |
| Subject: | SUSE-SU-2020:1493-1: Security update for libmspack | |
| Date: | Thu, 28 May 2020 00:20:05 +0200 (CEST) | |
| Message-ID: | <20200527222005.AC872FFD2@maintenance.suse.de> |
SUSE Security Update: Security update for libmspack ______________________________________________________________________________ Announcement ID: SUSE-SU-2020:1493-1 Rating: low References: #1130489 #1141680 Cross-References: CVE-2019-1010305 Affected Products: SUSE Linux Enterprise Module for Basesystem 15-SP1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for libmspack fixes the following issues: Security issue fixed: - CVE-2019-1010305: Fixed a buffer overflow triggered by a crafted chm file which could have led to information disclosure (bsc#1141680). Other issue addressed: - Enable build-time tests (bsc#1130489) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Basesystem 15-SP1: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP1-2020-1493=1 Package List: - SUSE Linux Enterprise Module for Basesystem 15-SP1 (aarch64 ppc64le s390x x86_64): libmspack-debugsource-0.6-3.8.19 libmspack-devel-0.6-3.8.19 libmspack0-0.6-3.8.19 libmspack0-debuginfo-0.6-3.8.19 References: https://www.suse.com/security/cve/CVE-2019-1010305.html https://bugzilla.suse.com/1130489 https://bugzilla.suse.com/1141680 _______________________________________________ sle-security-updates mailing list sle-security-updates@lists.suse.com http://lists.suse.com/mailman/listinfo/sle-security-updates