SUSE SLED15 / SLES15 Security Update : audiofile (SUSE-SU-2018:3506-1)

This update for audiofile fixes the following issues : CVE-2018-17095: A heap-based buffer overflow in Expand3To4Module::run could occurred when running sfconvert leading to crashes or code execution when handling untrusted soundfiles bsc1111586. Note that Tenable Network Security has extracted t...

OPENSUSE-SU-2019:0003-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issues: Security vulnerabilities fixed: - CVE-2018-20184: Fixed heap-based buffer overflow in the WriteTGAImage function of tga.c bsc1119822 - CVE-2018-20189: Fixed denial of service vulnerability in ReadDIBImage function of coders/dib.c bsc11197...

Security update for GraphicsMagick (moderate)

openSUSE Security Update: Security update for GraphicsMagick Announcement ID: openSUSE-SU-2019:0003-1 Rating: moderate References: 1119790 1119822 Cross-References: CVE-2018-20184 CVE-2018-20189 Affected Products: openSUSE Backports SLE-15 An update that fixes two vulnerabilities is now available...

Security update for GraphicsMagick (moderate)

openSUSE Security Update: Security update for GraphicsMagick Announcement ID: openSUSE-SU-2019:1-1 Rating: moderate References: 1119790 1119822 Cross-References: CVE-2018-20184 CVE-2018-20189 Affected Products: openSUSE Leap 15.0 An update that fixes two vulnerabilities is now available...

CVE-2018-20618

ok-file-formats through 2018-10-16 has a heap-based buffer over-read in the okmodecode2 function in okmo.c...

CVE-2018-20618

ok-file-formats through 2018-10-16 has a heap-based buffer over-read in the okmodecode2 function in okmo.c...

CVE-2018-20618

CVE-2018-20618 affects ok-file-formats up to 2018-10-16, with a heap-based buffer over-read in the ok_mo_decode2 function (ok_mo.c). Multiple connected sources confirm the vulnerability and scope, noting versions prior to 2018-10-16 are affected. Public documentation provided does not specify a f...

CVE-2018-20617

ok-file-formats through 2018-10-16 has a heap-based buffer overflow in the okcsvdecode2 function in okcsv.c...

CVE-2018-20617

ok-file-formats through 2018-10-16 has a heap-based buffer overflow in the okcsvdecode2 function in okcsv.c...

CVE-2018-20617

CVE-2018-20617 affects the ok-file-formats project, where a heap-based buffer overflow is caused by the ok_csv_decode2 function in ok_csv.c. The vulnerability is associated with versions through 2018-10-16. Connected sources (Red Hat, CNVD, CNVD, NVD/NVD variant) corroborate the same root cause a...

CVE-2018-20616

ok-file-formats through 2018-10-16 has a heap-based buffer overflow in the okwavdecodemsadpcmdata function in okwav.c...

CVE-2018-20616

CVE-2018-20616 affects ok-file-formats (library that decodes audio formats) and stems from a heap-based buffer overflow in the function ok_wav_decode_ms_adpcm_data inside ok_wav.c. The vulnerability is documented as affecting versions up to 2018-10-16. Public CNVD entry further notes that the fla...

openSUSE Security Update : GraphicsMagick (openSUSE-2018-1632)

This update for GraphicsMagick fixes the following issues : Security issues fixed : - CVE-2018-20184: Fixed heap-based buffer overflow in the WriteTGAImage function of tga.c bsc1119822 - CVE-2018-20189: Fixed denial of service vulnerability in ReadDIBImage function of coders/dib.c bsc1119790...

CVE-2018-25010

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ApplyFilter...

CVE-2018-25011

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16...

CVE-2018-20591

A heap-based buffer over-read was discovered in decompileJUMP function in util/decompile.c of libming v0.4.8. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by swftocxx...

Security update for GraphicsMagick (moderate)

This update for GraphicsMagick fixes the following issues: Security issues fixed: - CVE-2018-20184: Fixed heap-based buffer overflow in the WriteTGAImage function of tga.c bsc1119822 - CVE-2018-20189: Fixed denial of service vulnerability in ReadDIBImage function of coders/dib.c bsc1119790...

CVE-2018-20570

jp2encode in jp2/jp2enc.c in JasPer 2.0.14 has a heap-based buffer over-read...

CVE-2018-20570

jp2encode in jp2/jp2enc.c in JasPer 2.0.14 has a heap-based buffer over-read...

CVE-2018-20542

There is a heap-based buffer-overflow at generatorspgemmcscreader.c function libxsmmsparsecscreader in LIBXSMM 1.10, a different vulnerability than CVE-2018-20541 which is in a different part of the source code and is seen at a different address...