May 2020 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1160520] VUL-1: CVE-2020-6609: libredwg: heap-based buffer over-read in read_pages_map in decode_r2007.c
by bugzilla_noreply＠novell.com 04 May '20

04 May '20

http://bugzilla.suse.com/show_bug.cgi?id=1160520 http://bugzilla.suse.com/show_bug.cgi?id=1160520#c5 Alexandros Toptsoglou <atoptsoglou(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #5 from Alexandros Toptsoglou <atoptsoglou(a)suse.com> --- Done -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1161786] VUL-0: CVE-2019-20051: upx: floating point exception in PackLinuxElf:elf_hash in p_lx_elf.cpp
by bugzilla_noreply＠novell.com 04 May '20

04 May '20

http://bugzilla.suse.com/show_bug.cgi?id=1161786 http://bugzilla.suse.com/show_bug.cgi?id=1161786#c2 Alexandros Toptsoglou <atoptsoglou(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #2 from Alexandros Toptsoglou <atoptsoglou(a)suse.com> --- Leap 15.1 ships the 3.96 version which addresses this issue. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1152245] VUL-1: CVE-2019-16892: rubygem-rubyzip: bypass application checks on ZIP entry sizes
by bugzilla_noreply＠novell.com 04 May '20

04 May '20

http://bugzilla.suse.com/show_bug.cgi?id=1152245 http://bugzilla.suse.com/show_bug.cgi?id=1152245#c1 Stephan Kulow <coolo(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|coolo(a)suse.com |security-team(a)suse.de --- Comment #1 from Stephan Kulow <coolo(a)suse.com> --- leap 15.2 got 1.3.0 - and that's good enough for me. I don't maintain this package, I just got a bot to update them. recommend to WONTFIX -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1129881] VUL-0: CVE-2019-9770: libredwg: heap-based buffer overflow in the function dwg_decode_eed_data at decode.c for the y dimension
by bugzilla_noreply＠novell.com 04 May '20

04 May '20

http://bugzilla.suse.com/show_bug.cgi?id=1129881 http://bugzilla.suse.com/show_bug.cgi?id=1129881#c5 Alexandros Toptsoglou <atoptsoglou(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED CC| |atoptsoglou(a)suse.com Resolution|--- |FIXED --- Comment #5 from Alexandros Toptsoglou <atoptsoglou(a)suse.com> --- Done -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1129879] VUL-1: CVE-2019-9774: libredwg: out-of-bounds read in the function bit_read_B at bits.c
by bugzilla_noreply＠novell.com 04 May '20

04 May '20

http://bugzilla.suse.com/show_bug.cgi?id=1129879 http://bugzilla.suse.com/show_bug.cgi?id=1129879#c5 Alexandros Toptsoglou <atoptsoglou(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED CC| |atoptsoglou(a)suse.com Resolution|--- |FIXED --- Comment #5 from Alexandros Toptsoglou <atoptsoglou(a)suse.com> --- Done -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1129878] VUL-1: CVE-2019-9775: libredwg: out-of-bounds read in the function dwg_dxf_BLOCK_CONTROL at dwg.spec
by bugzilla_noreply＠novell.com 04 May '20

04 May '20

http://bugzilla.suse.com/show_bug.cgi?id=1129878 http://bugzilla.suse.com/show_bug.cgi?id=1129878#c5 Alexandros Toptsoglou <atoptsoglou(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED CC| |atoptsoglou(a)suse.com Resolution|--- |FIXED --- Comment #5 from Alexandros Toptsoglou <atoptsoglou(a)suse.com> --- Done -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1129876] VUL-1: CVE-2019-9771: libredwg: NULL pointer dereference in the function bit_convert_TU at bits.c
by bugzilla_noreply＠novell.com 04 May '20

04 May '20

http://bugzilla.suse.com/show_bug.cgi?id=1129876 http://bugzilla.suse.com/show_bug.cgi?id=1129876#c5 Alexandros Toptsoglou <atoptsoglou(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED CC| |atoptsoglou(a)suse.com Resolution|--- |FIXED --- Comment #5 from Alexandros Toptsoglou <atoptsoglou(a)suse.com> --- Done -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1129875] VUL-1: CVE-2019-9772: libredwg: NULL pointer dereference in the function dwg_dxf_LEADER at dwg.spec.
by bugzilla_noreply＠novell.com 04 May '20

04 May '20

http://bugzilla.suse.com/show_bug.cgi?id=1129875 http://bugzilla.suse.com/show_bug.cgi?id=1129875#c5 Alexandros Toptsoglou <atoptsoglou(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED CC| |atoptsoglou(a)suse.com Resolution|--- |FIXED --- Comment #5 from Alexandros Toptsoglou <atoptsoglou(a)suse.com> --- Done -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1129874] VUL-0: CVE-2019-9773: libredwg: heap-based buffer overflow in the function dwg_decode_eed_data at decode.c for the z dimension
by bugzilla_noreply＠novell.com 04 May '20

04 May '20

http://bugzilla.suse.com/show_bug.cgi?id=1129874 http://bugzilla.suse.com/show_bug.cgi?id=1129874#c5 Alexandros Toptsoglou <atoptsoglou(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED CC| |atoptsoglou(a)suse.com Resolution|--- |FIXED --- Comment #5 from Alexandros Toptsoglou <atoptsoglou(a)suse.com> --- Done -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1129873] VUL-1: CVE-2019-9776: libredwg: NULL pointer dereference in the function dwg_dxf_LTYPE at dwg.spec
by bugzilla_noreply＠novell.com 04 May '20

04 May '20

http://bugzilla.suse.com/show_bug.cgi?id=1129873 http://bugzilla.suse.com/show_bug.cgi?id=1129873#c5 Alexandros Toptsoglou <atoptsoglou(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED CC| |atoptsoglou(a)suse.com Resolution|--- |FIXED --- Comment #5 from Alexandros Toptsoglou <atoptsoglou(a)suse.com> --- Done -- You are receiving this mail because: You are on the CC list for the bug.

1 0