Oval Definition:oval:org.opensuse.security:def:67223
Revision Date:2021-08-17Version:1
Title:Security update for libsndfile (Critical)
Description:

This update for libsndfile fixes the following issues:

- CVE-2018-13139: Fixed a stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact. (bsc#1100167) - CVE-2018-19432: Fixed a NULL pointer dereference in the function sf_write_int in sndfile.c, which will lead to a denial of service. (bsc#1116993) - CVE-2021-3246: Fixed a heap buffer overflow vulnerability in msadpcm_decode_block. (bsc#1188540) - CVE-2018-19758: Fixed a heap-based buffer over-read at wav.c in wav_write_header in libsndfile 1.0.28 that will cause a denial of service. (bsc#1117954)
Family:unixClass:patch
Status:Reference(s):1055014
1055186
1061843
1065729
1077428
1100167
1116993
1117954
1129923
1134760
1152489
1168994
1173812
1174463
1174570
1174748
1174969
1175052
1175898
1176485
1176713
1177086
1177353
1177410
1177411
1177470
1177739
1177749
1177750
1177754
1177755
1177765
1177814
1177817
1177854
1177855
1177856
1177861
1178002
1178079
1178246
1188540
CVE-2018-13139
CVE-2018-19432
CVE-2018-19758
CVE-2020-10713
CVE-2020-14308
CVE-2020-14309
CVE-2020-14310
CVE-2020-14311
CVE-2020-14351
CVE-2020-15706
CVE-2020-15707
CVE-2020-16120
CVE-2020-25285
CVE-2021-3246
Platform(s):SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP3
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 is installed
  • AND Package Information
  • grub2-2.04-9.7 is installed
  • OR grub2-arm64-efi-debug-2.04-9.7 is installed
  • OR grub2-branding-upstream-2.04-9.7 is installed
  • OR grub2-i386-pc-debug-2.04-9.7 is installed
  • OR grub2-powerpc-ieee1275-debug-2.04-9.7 is installed
  • OR grub2-s390x-emu-debug-2.04-9.7 is installed
  • OR grub2-x86_64-efi-debug-2.04-9.7 is installed
  • BACK