gpp_maybe Security update for zvbi

SUSE-SLE-Module-Desktop-Applications-15-SP6-2025-979

This update for zvbi fixes the following issues: - CVE-2025-2173: Fixed check on src_length to avoid an unitinialized heap read (bsc#1239222). - CVE-2025-2174: Fixed integer overflow leading to heap overflow in src/conv.c, src/io-sim.c, src/search.c (bsc#1239299). - CVE-2025-2175: Fixed integer overflow in _vbi_strndup_iconv (bsc#1239312). - CVE-2025-2176: Fixed integer overflow in function vbi_capture_sim_load_caption in src/io-sim.c (bsc#1239319). - CVE-2025-2177: Fixed integer overflow in function vbi_search_new in src/search.c (bsc#1239320).

• Release Date
  Mar 21 2025
• References
  Bugzilla: 1239319, 1239312, 1239299, 1239222, 1239320
  CVEs: CVE-2025-2177, CVE-2025-2173, CVE-2025-2176, CVE-2025-2175, CVE-2025-2174
• Type
  security
• Severity
  important

cloud_download Downloads

Desktop Applications Module 15.6 s390x

• Packages
  libzvbi0
  VBI Decoding Library

  0.2.35-150000.4.3.1 lock rpm

  zvbi
  Linux "VBI proxy"

  0.2.35-150000.4.3.1 lock src

Desktop Applications Module 15.6 ppc64le

• Packages
  libzvbi0
  VBI Decoding Library

  0.2.35-150000.4.3.1 lock rpm

  zvbi
  Linux "VBI proxy"

  0.2.35-150000.4.3.1 lock src

Desktop Applications Module 15.6 aarch64

• Packages
  libzvbi0
  VBI Decoding Library

  0.2.35-150000.4.3.1 lock rpm

  zvbi
  Linux "VBI proxy"

  0.2.35-150000.4.3.1 lock src

Desktop Applications Module 15.6 x86_64

• Packages
  libzvbi0
  VBI Decoding Library

  0.2.35-150000.4.3.1 lock rpm

  zvbi
  Linux "VBI proxy"

  0.2.35-150000.4.3.1 lock src