SUSE-SU-2018:0784-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2018:0784-1

UNKNOWN

Security update for libvorbis

Published Mar 23, 2018

Modified 7 years ago

Fix available

Details

This update for libvorbis fixes the following issues:

CVE-2018-5146: Fixed out of bounds memory write while processing Vorbis audio data (bsc#1085687).

Affected Packages

libvorbis

SUSE Linux Enterprise Desktop 12 SP2SUSE Linux Enterprise Desktop 12 SP3SUSE Linux Enterprise Server 12 SP2SUSE Linux Enterprise Server 12 SP3SUSE Linux Enterprise Server for Raspberry Pi 12 SP2

Fixed in:

1.3.3-10.6.1

libvorbis0

SUSE Linux Enterprise Desktop 12 SP2SUSE Linux Enterprise Desktop 12 SP3SUSE Linux Enterprise Server 12 SP2SUSE Linux Enterprise Server 12 SP3SUSE Linux Enterprise Server for Raspberry Pi 12 SP2

Fixed in:

1.3.3-10.6.1

libvorbis0-32bit

SUSE Linux Enterprise Desktop 12 SP2SUSE Linux Enterprise Desktop 12 SP3SUSE Linux Enterprise Server 12 SP2SUSE Linux Enterprise Server 12 SP3SUSE Linux Enterprise Server for SAP Applications 12 SP2

Fixed in:

1.3.3-10.6.1

libvorbisenc2

SUSE Linux Enterprise Desktop 12 SP2SUSE Linux Enterprise Desktop 12 SP3SUSE Linux Enterprise Server 12 SP2SUSE Linux Enterprise Server 12 SP3SUSE Linux Enterprise Server for Raspberry Pi 12 SP2

Fixed in:

1.3.3-10.6.1

libvorbisenc2-32bit

SUSE Linux Enterprise Desktop 12 SP2SUSE Linux Enterprise Desktop 12 SP3SUSE Linux Enterprise Server 12 SP2SUSE Linux Enterprise Server 12 SP3SUSE Linux Enterprise Server for SAP Applications 12 SP2

Fixed in:

1.3.3-10.6.1

libvorbisfile3

SUSE Linux Enterprise Desktop 12 SP2SUSE Linux Enterprise Desktop 12 SP3SUSE Linux Enterprise Server 12 SP2SUSE Linux Enterprise Server 12 SP3SUSE Linux Enterprise Server for Raspberry Pi 12 SP2

Fixed in:

1.3.3-10.6.1

libvorbisfile3-32bit

SUSE Linux Enterprise Desktop 12 SP2SUSE Linux Enterprise Desktop 12 SP3SUSE Linux Enterprise Server 12 SP2SUSE Linux Enterprise Server 12 SP3SUSE Linux Enterprise Server for SAP Applications 12 SP2

Fixed in:

1.3.3-10.6.1

libvorbis-doc

SUSE Linux Enterprise Server 12 SP2SUSE Linux Enterprise Server 12 SP3SUSE Linux Enterprise Server for Raspberry Pi 12 SP2SUSE Linux Enterprise Server for SAP Applications 12 SP2SUSE Linux Enterprise Server for SAP Applications 12 SP3

Fixed in:

1.3.3-10.6.1

libvorbis-devel

SUSE Linux Enterprise Software Development Kit 12 SP2SUSE Linux Enterprise Software Development Kit 12 SP3

Fixed in:

1.3.3-10.6.1

References

REPORT

https://bugzilla.suse.com/1085687

WEB

https://www.suse.com/security/cve/CVE-2018-5146

ADVISORY