shield Security update for libcroco

SUSE-SLE-SERVER-12-SP4-2019-1468

This update for libcroco fixes the following issues: Security issues fixed: - CVE-2017-7960: Fixed heap overflow (input: check end of input before reading a byte) (bsc#1034481). - CVE-2017-7961: Fixed undefined behavior (tknzr: support only max long rgb values) (bsc#1034482). - CVE-2017-8834: Fixed denial of service (memory allocation error) via a crafted CSS file (bsc#1043898). - CVE-2017-8871: Fixed denial of service (infinite loop and CPU consumption) via a crafted CSS file (bsc#1043899).

• Release Date
  Jun 12 2019
• References
  Bugzilla: 1043898, 1043899, 1034481, 1034482
  CVEs: CVE-2017-7960, CVE-2017-7961, CVE-2017-8871, CVE-2017-8834
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 12.4 s390x

• Packages
  libcroco
  CSS2 Parser Library

  0.6.11-12.3.1

  lock src

  libcroco-0_6-3
  CSS2 Parser Library

  0.6.11-12.3.1

  lock rpm

  libcroco-0_6-3-32bit
  CSS2 Parser Library

  0.6.11-12.3.1

  lock rpm

SUSE Linux Enterprise Server 12.4 aarch64

• Packages
  libcroco
  CSS2 Parser Library

  0.6.11-12.3.1

  lock src

  libcroco-0_6-3
  CSS2 Parser Library

  0.6.11-12.3.1

  lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.4 ppc64le

• Packages
  libcroco
  CSS2 Parser Library

  0.6.11-12.3.1

  lock src

  libcroco-0_6-3
  CSS2 Parser Library

  0.6.11-12.3.1

  lock rpm

SUSE Linux Enterprise Server 12.4 x86_64

• Packages
  libcroco
  CSS2 Parser Library

  0.6.11-12.3.1

  lock src

  libcroco-0_6-3
  CSS2 Parser Library

  0.6.11-12.3.1

  lock rpm

  libcroco-0_6-3-32bit
  CSS2 Parser Library

  0.6.11-12.3.1

  lock rpm