Lucene search

K
suseSuseOPENSUSE-SU-2019:1905-1
HistoryAug 15, 2019 - 12:00 a.m.

Security update for dosbox (important)

2019-08-1500:00:00
lists.opensuse.org
45

0.036 Low

EPSS

Percentile

91.7%

An update that fixes two vulnerabilities is now available.

Description:

This update for dosbox fixes the following issues:

Security issues fixed:

  • CVE-2019-7165: Fixed that a very long line inside a bat file would
    overflow the parsing buffer (bnc#1140254).
  • CVE-2019-12594: Added a basic permission system so that a program
    running inside DOSBox can’t access the contents of /proc (e.g.
    /proc/self/mem) when / or /proc were (to be) mounted (bnc#1140254).
  • Several other fixes for out of bounds access and buffer overflows.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Leap 15.1:

    zypper in -t patch openSUSE-2019-1905=1

  • openSUSE Leap 15.0:

    zypper in -t patch openSUSE-2019-1905=1

  • openSUSE Backports SLE-15:

    zypper in -t patch openSUSE-2019-1905=1