Security update for icoutils (important)

2017-01-1700:08:40

lists.opensuse.org

0.028 Low

EPSS

Percentile

89.6%

JSON

This update for icoutils to version 0.31.1 fixes the following issues:

CVE-2017-5208: An integer overflow allows maliciously crafted files to
cause DoS or code execution (boo#1018756).
CVE-2017-5331: Incorrect out of bounds checks in check_offset allow for
DoS or code execution (boo#1018756).
CVE-2017-5332: Missing out of bounds checks in
extract_group_icon_cursor_resource allow for DoS or code execution
(boo#1018756).
CVE-2017-5333: Incorrect out of bounds checks in check_offset allow for
DoS or code execution (boo#1018756).

OSVersionArchitecturePackageVersionFilename
openSUSE Leap42.1x86_64icoutils-debuginfo< 0.31.1-7.1icoutils-debuginfo-0.31.1-7.1.x86_64.rpm
openSUSE Leap42.1i586icoutils-debugsource< 0.31.1-7.1icoutils-debugsource-0.31.1-7.1.i586.rpm
openSUSE Leap42.1i586icoutils< 0.31.1-7.1icoutils-0.31.1-7.1.i586.rpm
openSUSE Leap42.1i586icoutils-debuginfo< 0.31.1-7.1icoutils-debuginfo-0.31.1-7.1.i586.rpm
openSUSE Leap42.1x86_64icoutils-debugsource< 0.31.1-7.1icoutils-debugsource-0.31.1-7.1.x86_64.rpm
openSUSE Leap42.1x86_64icoutils< 0.31.1-7.1icoutils-0.31.1-7.1.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
openSUSE Leap	42.1	x86_64	icoutils-debuginfo	< 0.31.1-7.1	icoutils-debuginfo-0.31.1-7.1.x86_64.rpm
openSUSE Leap	42.1	i586	icoutils-debugsource	< 0.31.1-7.1	icoutils-debugsource-0.31.1-7.1.i586.rpm
openSUSE Leap	42.1	i586	icoutils	< 0.31.1-7.1	icoutils-0.31.1-7.1.i586.rpm
openSUSE Leap	42.1	i586	icoutils-debuginfo	< 0.31.1-7.1	icoutils-debuginfo-0.31.1-7.1.i586.rpm
openSUSE Leap	42.1	x86_64	icoutils-debugsource	< 0.31.1-7.1	icoutils-debugsource-0.31.1-7.1.x86_64.rpm
openSUSE Leap	42.1	x86_64	icoutils	< 0.31.1-7.1	icoutils-0.31.1-7.1.x86_64.rpm