CVE-2014-8154

CVE-2014-8154 affects Vala 0.26.0 and 0.26.1, where Gst.MapInfo uses an incorrect buffer length declaration in the Gstreamer bindings. This leads to a heap-based buffer overflow that could enable a context-dependent attacker to cause a denial of service (crash) and possibly execute arbitrary code...

openSUSE Security Update : shotwell / vala (openSUSE-SU-2015:0131-1)

vala was updated to fix a heap buffer overflow in generated code during build boo913071, CVE-2014-8154. shotwell was rebuilt using above fixed vala. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...