SUSE-SU-2023:3639-1

See a problem?
Please try reporting it to the source first.

Source

Import Source

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2023:3639-1

Related

Published

2023-09-18T11:33:33Z

Modified

2023-09-18T11:33:33Z

Summary

Security update for libeconf

Details

This update for libeconf fixes the following issues:

Update to version 0.5.2.

CVE-2023-30078, CVE-2023-32181: Fixed a stack-buffer-overflow vulnerability in 'econf_writeFile' function (bsc#1211078).
CVE-2023-30079, CVE-2023-22652: Fixed a stack-buffer-overflow vulnerability in 'read_file' function. (bsc#1211078)

The following non-security bug was fixed:

Fixed parsing files correctly which have space characters AND none space characters as delimiters (bsc#1198165).

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.5.2-150300.3.11.1

{
    "binaries": [
        {
            "libeconf0": "0.5.2-150300.3.11.1"
        }
    ]
}

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.5.2-150300.3.11.1

{
    "binaries": [
        {
            "libeconf0": "0.5.2-150300.3.11.1"
        }
    ]
}

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.5.2-150300.3.11.1

{
    "binaries": [
        {
            "libeconf0": "0.5.2-150300.3.11.1"
        }
    ]
}

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.5.2-150300.3.11.1

{
    "binaries": [
        {
            "libeconf0": "0.5.2-150300.3.11.1"
        }
    ]
}