SUSE-SU-2020:1622-1

Details

Description of the patch:

This update for libEMF fixes the following issues:

CVE-2020-11863: Fixed an issue which could have led to denial of service (bsc#1171496).
CVE-2020-11864: Fixed an issue which could have led to denial of service (bsc#1171499).
CVE-2020-11865: Fixed an out of bounds memory access (bsc#1171497).
CVE-2020-11866: Fixed a use after free (bsc#1171498).

Affected Packages

libEMF-devel

SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP4SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

1.0.7-11.3.1

libEMF1

SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP4SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

1.0.7-11.3.1

References

ADVISORY

https://bugzilla.suse.com/1171496

ADVISORY

https://bugzilla.suse.com/1171497

ADVISORY

https://bugzilla.suse.com/1171498

ADVISORY

https://bugzilla.suse.com/1171499

ADVISORY