Oval Definition:oval:org.opensuse.security:def:111681
Revision Date:2021-08-20Version:1
Title:Security update for libmspack (Moderate)
Description:

This update for libmspack fixes the following issues:

- CVE-2018-14681: Bad KWAJ file header extensions could cause a one or two byte overwrite. (bsc#1103032) - CVE-2018-14682: There is an off-by-one error in the TOLOWER() macro for CHM decompression. (bsc#1103032) - CVE-2018-14679: There is an off-by-one error in the CHM PMGI/PMGL chunk number validity checks, which could lead to denial of service. (bsc#1103032)
Family:unixClass:patch
Status:Reference(s):1103032
CVE-2018-14679
CVE-2018-14681
CVE-2018-14682
openSUSE-SU-2021:2802-1
Platform(s):openSUSE Leap 15.3
Product(s):
Definition Synopsis
  • openSUSE Leap 15.3 is installed
  • AND Package Information
  • libmspack-devel-0.6-3.11.1 is installed
  • OR libmspack0-0.6-3.11.1 is installed
  • OR libmspack0-32bit-0.6-3.11.1 is installed
  • OR mspack-tools-0.6-3.11.1 is installed
  • BACK