SUSE SLES15 Security Update : ovmf (SUSE-SU-2018:4155-1)

This update for ovmf fixes the following issues : Security issues fixed : CVE-2018-3613: Fixed AuthVariable Timestamp zeroing issue on APPENDWRITE bsc1115916. CVE-2017-5731: Fixed privilege escalation via processing of malformed files in TianoCompress.c bsc1115917. CVE-2017-5732: Fixed privilege...

Horner Automation Cscape CSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Horner Automation Cscape. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2018:2043-1)

This update for ImageMagick fixes the following issues: The following security vulnerabilities were fixed : - CVE-2018-11625: Fixed heap-based buffer over-read in SetGrayscaleImage in the quantize.c file, which allowed remote attackers to cause buffer over-read via a crafted file. bsc1096200 -...

SUSE SLED15 / SLES15 Security Update : unzip (SUSE-SU-2018:1883-1)

This update for unzip fixes the following issues : - CVE-2014-9636: Prevent denial of service out-of-bounds read or write and crash via an extra field with an uncompressed size smaller than the compressed field size in a zip archive that advertises STORED method compression bsc914442 -...

SUSE SLED15 / SLES15 Security Update : exiv2 (SUSE-SU-2018:1882-1)

This update for exiv2 to 0.26 fixes the following security issues : - CVE-2017-14864: Prevent invalid memory address dereference in Exiv2::getULong that could have caused a segmentation fault and application crash, which leads to denial of service bsc1060995. - CVE-2017-14862: Prevent invalid...

SUSE SLED15 / SLES15 Security Update : tiff (SUSE-SU-2018:4008-1)

This update for tiff fixes the following issues : Security issues fixed : CVE-2018-19210: Fixed NULL pointer dereference in the TIFFWriteDirectorySec function bsc1115717. CVE-2017-12944: Fixed denial of service issue in the TIFFReadDirEntryArray function bsc1054594. CVE-2016-10094: Fixed heap-bas...

SUSE SLED15 / SLES15 Security Update : audiofile (SUSE-SU-2018:3506-1)

This update for audiofile fixes the following issues : CVE-2018-17095: A heap-based buffer overflow in Expand3To4Module::run could occurred when running sfconvert leading to crashes or code execution when handling untrusted soundfiles bsc1111586. Note that Tenable Network Security has extracted t...

SUSE SLED15 / SLES15 Security Update : tiff (SUSE-SU-2018:3327-1)

This update for tiff fixes the following issues : Security issue fixed : CVE-2018-10779: TIFFWriteScanline in tifwrite.c had a heap-based buffer over-read, as demonstrated by bmp2tiff.bsc1092480 CVE-2018-17100: There is a int32 overflow in multiplyms in tools/ppm2tiff.c, which can cause a denial ...

OPENSUSE-SU-2019:0003-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issues: Security vulnerabilities fixed: - CVE-2018-20184: Fixed heap-based buffer overflow in the WriteTGAImage function of tga.c bsc1119822 - CVE-2018-20189: Fixed denial of service vulnerability in ReadDIBImage function of coders/dib.c bsc11197...

Security update for GraphicsMagick (moderate)

openSUSE Security Update: Security update for GraphicsMagick Announcement ID: openSUSE-SU-2019:0003-1 Rating: moderate References: 1119790 1119822 Cross-References: CVE-2018-20184 CVE-2018-20189 Affected Products: openSUSE Backports SLE-15 An update that fixes two vulnerabilities is now available...

Security update for GraphicsMagick (moderate)

openSUSE Security Update: Security update for GraphicsMagick Announcement ID: openSUSE-SU-2019:1-1 Rating: moderate References: 1119790 1119822 Cross-References: CVE-2018-20184 CVE-2018-20189 Affected Products: openSUSE Leap 15.0 An update that fixes two vulnerabilities is now available...

CVE-2018-20618

ok-file-formats through 2018-10-16 has a heap-based buffer over-read in the okmodecode2 function in okmo.c...

CVE-2018-20618

CVE-2018-20618 affects ok-file-formats up to 2018-10-16, with a heap-based buffer over-read in the ok_mo_decode2 function (ok_mo.c). Multiple connected sources confirm the vulnerability and scope, noting versions prior to 2018-10-16 are affected. Public documentation provided does not specify a f...

CVE-2018-20618

ok-file-formats through 2018-10-16 has a heap-based buffer over-read in the okmodecode2 function in okmo.c...

CVE-2018-20617

ok-file-formats through 2018-10-16 has a heap-based buffer overflow in the okcsvdecode2 function in okcsv.c...

CVE-2018-20617

ok-file-formats through 2018-10-16 has a heap-based buffer overflow in the okcsvdecode2 function in okcsv.c...

CVE-2018-20617

CVE-2018-20617 affects the ok-file-formats project, where a heap-based buffer overflow is caused by the ok_csv_decode2 function in ok_csv.c. The vulnerability is associated with versions through 2018-10-16. Connected sources (Red Hat, CNVD, CNVD, NVD/NVD variant) corroborate the same root cause a...

CVE-2018-20616

ok-file-formats through 2018-10-16 has a heap-based buffer overflow in the okwavdecodemsadpcmdata function in okwav.c...

CVE-2018-20616

CVE-2018-20616 affects ok-file-formats (library that decodes audio formats) and stems from a heap-based buffer overflow in the function ok_wav_decode_ms_adpcm_data inside ok_wav.c. The vulnerability is documented as affecting versions up to 2018-10-16. Public CNVD entry further notes that the fla...

openSUSE Security Update : GraphicsMagick (openSUSE-2018-1632)

This update for GraphicsMagick fixes the following issues : Security issues fixed : - CVE-2018-20184: Fixed heap-based buffer overflow in the WriteTGAImage function of tga.c bsc1119822 - CVE-2018-20189: Fixed denial of service vulnerability in ReadDIBImage function of coders/dib.c bsc1119790...