gpp_maybe Security update for libofx

sdksp4-libofx-13701

This update for libofx fixes the following issues: Security issues fixed: - CVE-2017-2816: Fix an exploitable buffer overflow vulnerability in the tag parsing functionality (bsc#1058673). - CVE-2017-2920: Fix a buffer overflow vulnerability in sanitize_proprietary_tags in lib/ofx_preproc.cpp (bsc#1061964). - CVE-2017-14731: Fix remote denial of service via a crafted file in ofx_proc_file in ofx_preproc.cpp (bsc#1060437).

• Release Date
  Jul 24 2018
• References
  Bugzilla: 1058673, 1060437, 1061964
  CVEs: CVE-2017-2920, CVE-2017-2816, CVE-2017-14731
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 11.4 unknown

• Packages
  libofx
  OFX Command Parser and API

  0.9.0-3.7.1 lock rpm lock src

  libofx-devel
  OFX Command Parser and API

  0.9.0-3.7.1 lock rpm

  libofx4
  OFX Command Parser and API

  0.9.0-3.7.1 lock rpm

SUSE Linux Enterprise Software Development Kit 11.4 unknown

• Packages
  libofx
  OFX Command Parser and API

  0.9.0-3.7.1 lock rpm lock src

  libofx-devel
  OFX Command Parser and API

  0.9.0-3.7.1 lock rpm

  libofx4
  OFX Command Parser and API

  0.9.0-3.7.1 lock rpm