Alerts This Week
Warning Icon 1 681
Alerts This Week
Warning Icon 1 681

openSUSE: 2023:0413-1 moderate: cppcheck heap use-after-free

opensuse
Calendar Grey December 24, 2023
Dist Opensuse Esm H88
Explore the latest security update for openSUSE regarding cppcheck, which addresses a moderate severity heap-related use-after-free flaw.
An update that fixes one vulnerability is now available

Description

This update for cppcheck fixes the following issues:

- CVE-2023-39070: Fixed heap use-after-free in removeContradiction()

(boo#1215233)

- update to 2.12.1:

* Support importing projects with project-name

- update to 2.12.0:

* uselessOverride finds overriding functions that either duplicate code

from or delegate back to the base class implementation

* knownPointerToBool finds pointer to bool conversions that are always

true or false

* truncLongCastAssignment and truncLongCastReturn check additional

types, including float/double/long double

* duplInheritedMember also reports duplicated member functions

* constParameter*/constVariable* checks find more instances of

pointers/references that can be const, e.g. when calling library

functions

* Write how many checkers was activated after a run

* Added --checkers-report that can be used to generate a report in a

file that shows what...

Read the Full Advisory

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Backports SLE-15-SP5:

zypper in -t patch openSUSE-2023-413=1

Package List

- openSUSE Backports SLE-15-SP5 (aarch64 ppc64le s390x x86_64):

cppcheck-2.12.1-bp155.2.3.1

cppcheck-gui-2.12.1-bp155.2.3.1

References

https://www.suse.com/security/cve/CVE-2023-39070.html

https://bugzilla.suse.com/1215233

Announcement ID: openSUSE-SU-2023:0413-1
Rating: moderate
Affected Products: openSUSE Backports SLE-15-SP5 .

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here