shield Security update for libmspack

SUSE-SLE-Module-Basesystem-15-SP2-2021-2802

This update for libmspack fixes the following issues: - CVE-2018-14681: Bad KWAJ file header extensions could cause a one or two byte overwrite. (bsc#1103032) - CVE-2018-14682: There is an off-by-one error in the TOLOWER() macro for CHM decompression. (bsc#1103032) - CVE-2018-14679: There is an off-by-one error in the CHM PMGI/PMGL chunk number validity checks, which could lead to denial of service. (bsc#1103032)

• Release Date
  Aug 20 2021
• References
  Bugzilla: 1103032
  CVEs: CVE-2018-14682, CVE-2018-14681, CVE-2018-14679
• Type
  security
• Severity
  moderate

cloud_download Downloads

Basesystem Module 15.2 s390x

• Packages
  libmspack
  Library That Implements Different Microsoft Compressions

  0.6-3.11.1 lock src

  libmspack-devel
  Static libraries, header files and documentation for libmspack

  0.6-3.11.1 lock rpm

  libmspack0
  Library That Implements Different Microsoft Compressions

  0.6-3.11.1 lock rpm

Basesystem Module 15.2 ppc64le

• Packages
  libmspack
  Library That Implements Different Microsoft Compressions

  0.6-3.11.1 lock src

  libmspack-devel
  Static libraries, header files and documentation for libmspack

  0.6-3.11.1 lock rpm

  libmspack0
  Library That Implements Different Microsoft Compressions

  0.6-3.11.1 lock rpm

Basesystem Module 15.2 aarch64

• Packages
  libmspack
  Library That Implements Different Microsoft Compressions

  0.6-3.11.1 lock src

  libmspack-devel
  Static libraries, header files and documentation for libmspack

  0.6-3.11.1 lock rpm

  libmspack0
  Library That Implements Different Microsoft Compressions

  0.6-3.11.1 lock rpm

Basesystem Module 15.2 x86_64

• Packages
  libmspack
  Library That Implements Different Microsoft Compressions

  0.6-3.11.1 lock src

  libmspack-devel
  Static libraries, header files and documentation for libmspack

  0.6-3.11.1 lock rpm

  libmspack0
  Library That Implements Different Microsoft Compressions

  0.6-3.11.1 lock rpm