SUSE SLES11 Security Update : jasper (SUSE-SU-2017:0946-1)

This update for jasper fixes the following issues: Security issues fixed : - CVE-2016-8654: Heap-based buffer overflow in QMFB code in JPC codec bsc1012530 - CVE-2016-9395: Missing sanity checks on the data in a SIZ marker segment bsc1010977. - CVE-2016-9398: jpcmath.c:94: int jpcfloorlog2int:...

SUSE SLED12 / SLES12 Security Update : libquicktime (SUSE-SU-2017:0610-1)

This update for libquicktime fixes the following issues : - A crafted MP4 file could have caused libquicktime to crash or lead to undefined behaviour bsc1022805, CVE-2016-2399 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

openSUSE Security Update : zlib (openSUSE-2016-1499)

This update for zlib fixes the following issues : - Remove incompatible declarations of 'struct internalstate' boo1003577 - Avoid out-of-bounds pointer arithmetic in inftrees.c boo1003579, CVE-2016-9840, CVE-2016-9841 - Avoid left-shift with negative number boo1003580, CVE-2016-9842 - Avoid...

Vulnerability in OpenSSL - Pointer arithmetic undefined behaviour

Avoid some undefined pointer arithmetic A common idiom in the codebase is to check limits in the following manner: “p + len limit” Where “p” points to some malloc’d data of SIZE bytes and limit == p + SIZE “len” here could be from some externally supplied data e.g. from a TLS message. The rules o...