shield Security update for libsass

SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-4895

This update for libsass fixes the following issues: - CVE-2022-26592: Fixed Stack Overflow vulnerability in libsass 3.6.5 via the CompoundSelector:has_real_parent_ref function (bsc#1214576) - CVE-2022-43358: Fixed Stack overflow vulnerability in ast_selectors.cpp (bsc#1214575). - CVE-2022-43357: Fixed Stack overflow vulnerability in ast_selectors.cpp (bsc#1214573).

• Release Date
  Dec 18 2023
• References
  Bugzilla: 1214576, 1214575, 1214573
  CVEs: CVE-2022-43358, CVE-2022-43357, CVE-2022-26592
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Package Hub 15.4 x86_64

• Packages
  libsass
  Compiler library for A CSS preprocessor language

  3.6.5-150200.4.10.1 lock src

  libsass-3_6_5-1
  Compiler library for A CSS preprocessor language

  3.6.5-150200.4.10.1 lock rpm

  libsass-devel
  Development files for libsass, a library for a CSS preprocessor language

  3.6.5-150200.4.10.1 lock rpm

SUSE Package Hub 15.4 s390x

• Packages
  libsass
  Compiler library for A CSS preprocessor language

  3.6.5-150200.4.10.1 lock src

  libsass-3_6_5-1
  Compiler library for A CSS preprocessor language

  3.6.5-150200.4.10.1 lock rpm

  libsass-devel
  Development files for libsass, a library for a CSS preprocessor language

  3.6.5-150200.4.10.1 lock rpm

SUSE Package Hub 15.4 ppc64le

• Packages
  libsass
  Compiler library for A CSS preprocessor language

  3.6.5-150200.4.10.1 lock src

  libsass-3_6_5-1
  Compiler library for A CSS preprocessor language

  3.6.5-150200.4.10.1 lock rpm

  libsass-devel
  Development files for libsass, a library for a CSS preprocessor language

  3.6.5-150200.4.10.1 lock rpm

SUSE Package Hub 15.4 aarch64

• Packages
  libsass
  Compiler library for A CSS preprocessor language

  3.6.5-150200.4.10.1 lock src

  libsass-3_6_5-1
  Compiler library for A CSS preprocessor language

  3.6.5-150200.4.10.1 lock rpm

  libsass-devel
  Development files for libsass, a library for a CSS preprocessor language

  3.6.5-150200.4.10.1 lock rpm