shield Security update for libquicktime

SUSE-SLE-SDK-12-SP2-2017-1107

This update for libquicktime fixes the following issues: * CVE-2017-9122: A DoS in quicktime_read_moov function in moov.c via acrafted mp4 file was fixed. (bsc#1044077) * CVE-2017-9123: An invalid memory read in lqt_frame_duration via a crafted mp4 file was fixed. (bsc#1044009) * CVE-2017-9124: A NULL pointer dereference in quicktime_match_32 via a crafted mp4 file was fixed. (bsc#1044008) * CVE-2017-9125: A DoS in lqt_frame_duration function in lqt_quicktime.c via crafted mp4 file was fixed. (bsc#1044122) * CVE-2017-9126: A heap-based buffer overflow in quicktime_read_dref_table via a crafted mp4 file was fixed. (bsc#1044006) * CVE-2017-9127: A heap-based buffer overflow in quicktime_user_atoms_read_atom via a crafted mp4 file was fixed. (bsc#1044002) * CVE-2017-9128: A heap-based buffer over-read in quicktime_video_width via a crafted mp4 file was fixed. (bsc#1044000)

Release Date

Jul 4 2017
References

Bugzilla: 1044006, 1044077, 1044000, 1044008, 1044009, 1044002, 1044122
CVEs: CVE-2017-9128, CVE-2017-9126, CVE-2017-9127, CVE-2017-9124, CVE-2017-9125, CVE-2017-9122, CVE-2017-9123
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Software Development Kit 12.2 aarch64

Packages

libquicktime
Library for Reading and Writing Quicktime Movie Files

1.2.4-13.1 lock src

libquicktime-devel
Library for reading/writing quicktime movie files

1.2.4-13.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.2 ppc64le

Packages

libquicktime
Library for Reading and Writing Quicktime Movie Files

1.2.4-13.1 lock src

libquicktime-devel
Library for reading/writing quicktime movie files

1.2.4-13.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.2 s390x

Packages

libquicktime
Library for Reading and Writing Quicktime Movie Files

1.2.4-13.1 lock src

libquicktime-devel
Library for reading/writing quicktime movie files

1.2.4-13.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.2 x86_64

Packages

libquicktime
Library for Reading and Writing Quicktime Movie Files

1.2.4-13.1 lock src

libquicktime-devel
Library for reading/writing quicktime movie files

1.2.4-13.1 lock rpm