SUSE-SU-2022:0820-1
Security update for libcaca
Einstufung nach Quelle
Keine Quelle nennt einen CVSS-Wert.
Trivys eigenes Label ist CRITICAL. Kritisch laut SUSE.
Beschreibung
This update for libcaca fixes the following issues: - CVE-2021-30498, CVE-2021-30499: If an image has a size of 0x0, when exporting, no data is written and space is allocated for the header only, not taking into account that sprintf appends a NUL byte (bsc#1184751, bsc#1184752).
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| SUSE Linux Enterprise 12.2 | libcaca0 | 0.99.beta18-14.6.1 |
| SUSE Linux Enterprise 12.3 | libcaca0 | 0.99.beta18-14.6.1 |
| SUSE Linux Enterprise 12.4 | libcaca0 | 0.99.beta18-14.6.1 |
| SUSE Linux Enterprise 12.5 | libcaca-devel, libcaca0, libcaca0-plugins | 0.99.beta18-14.6.1 |
Alle 6 Einträge aus 4 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| SUSE Linux Enterprise 12.2 | libcaca0 | 0.99.beta18-14.6.1 |
| SUSE Linux Enterprise 12.3 | libcaca0 | 0.99.beta18-14.6.1 |
| SUSE Linux Enterprise 12.4 | libcaca0 | 0.99.beta18-14.6.1 |
| SUSE Linux Enterprise 12.5 | libcaca-devel | 0.99.beta18-14.6.1 |
| SUSE Linux Enterprise 12.5 | libcaca0 | 0.99.beta18-14.6.1 |
| SUSE Linux Enterprise 12.5 | libcaca0-plugins | 0.99.beta18-14.6.1 |
Referenzen
- https://bugzilla.suse.com/1184751
- https://bugzilla.suse.com/1184752
- https://lists.suse.com/pipermail/sle-security-updates/2022-March/010432.html
- https://www.suse.com/security/cve/CVE-2021-30498/
- https://www.suse.com/security/cve/CVE-2021-30499/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2022/suse-su-20220820-1/