openSUSE: 2018:0569-1 Important: freexl Heap Overflow Fixes
opensuse
March 1, 2018
An update that fixes 5 vulnerabilities is now available.
Description
This update for freexl fixes the following issues:
freexl was updated to version 1.0.5:
* No changelog provided by upstream
* Various heapoverflows in 1.0.4 have been fixed:
* CVE-2018-7439: heap-buffer-overflow in freexl.c:3912
read_mini_biff_next_record (boo#1082774)
* CVE-2018-7438: heap-buffer-overflow in freexl.c:383
parse_unicode_string (boo#1082775)
* CVE-2018-7437: heap-buffer-overflow in freexl.c:1866
parse_SST(boo#1082776)
* CVE-2018-7436: heap-buffer-overflow in freexl.c:1805 parse_SST
parse_SST (boo#1082777)
* CVE-2018-7435: heap-buffer-overflow in freexl::destroy_cell
(boo#1082778)
Patch
Patch Instructions:
To install this openSUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product:
- SUSE Package Hub for SUSE Linux Enterprise 12:
zypper in -t patch openSUSE-2018-217=1
To bring your system up-to-date, use "zypper patch".
Package List
- SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64):
freexl-debugsource-1.0.5-8.1
freexl-devel-1.0.5-8.1
libfreexl1-1.0.5-8.1
libfreexl1-debuginfo-1.0.5-8.1
References
https://www.suse.com/security/cve/CVE-2018-7435.html
https://www.suse.com/security/cve/CVE-2018-7436.html
https://www.suse.com/security/cve/CVE-2018-7437.html
https://www.suse.com/security/cve/CVE-2018-7438.html
https://www.suse.com/security/cve/CVE-2018-7439.html
https://bugzilla.suse.com/1082774
https://bugzilla.suse.com/1082775
https://bugzilla.suse.com/1082776
https://bugzilla.suse.com/1082777
https://bugzilla.suse.com/1082778
--
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Announcement ID: openSUSE-SU-2018:0569-1
Rating: important
Affected Products:
SUSE Package Hub for SUSE Linux Enterprise 12
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!