Lucene search

K
suseSuseOPENSUSE-SU-2018:2229-1
HistoryAug 07, 2018 - 3:07 p.m.

Security update for libofx (important)

2018-08-0715:07:58
lists.opensuse.org
56

0.002 Low

EPSS

Percentile

64.7%

This update for libofx fixes the following issues:

The following security vulnerabilities have been addressed:

  • CVE-2017-2920: Fixed an exploitable buffer overflow in the tag parsing
    functionality, which could result in an out of bounds write and could be
    triggered via a specially crafted OFX file (boo#1061964)

  • CVE-2017-2816: Fixed another buffer overflow in the tag parsing
    functionality, which could result in an stack overflow and could be
    triggered via a specially crafted OFX file (boo#1058673)