openSUSE-SU-2019:0240-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2019:0240-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2019:0240-1
Related
Published
2019-02-24T18:19:35Z
Modified
2019-02-24T18:19:35Z
Summary
Security update for pspp, spread-sheet-widget
Details

This update for pspp to version 1.2.0 fixes the following issues:

Security issue fixed:

  • CVE-2018-20230: Fixed a heap-based buffer overflow in readbytesinternal function that could lead to denial-of-service (bsc#1120061).

Other bug fixes and changes:

  • Add upstream patch to avoid compiling with old Texinfo 4.13.
  • New experimental command SAVE DATA COLLECTION to save MDD files.
  • MTIME and YMDHMS variable formats now supported.
  • Spread sheet rendering now done via spread-sheet-widget.

This update introduces a new package called spread-sheet-widget as dependency.

This update was imported from the openSUSE:Leap:15.0:Update update project.

References

Affected packages

SUSE:Package Hub 15 / pspp

Package

Name
pspp
Purl
pkg:rpm/suse/pspp&distro=SUSE%20Package%20Hub%2015

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.2.0-bp150.3.3.1

Ecosystem specific 

{
    "binaries": [
        {
            "pspp-devel": "1.2.0-bp150.3.3.1",
            "pspp": "1.2.0-bp150.3.3.1",
            "libspread-sheet-widget0": "0.3-bp150.2.1",
            "spread-sheet-widget-devel": "0.3-bp150.2.1"
        }
    ]
}

SUSE:Package Hub 15 / spread-sheet-widget

Package

Name
spread-sheet-widget
Purl
pkg:rpm/suse/spread-sheet-widget&distro=SUSE%20Package%20Hub%2015

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.3-bp150.2.1

Ecosystem specific 

{
    "binaries": [
        {
            "pspp-devel": "1.2.0-bp150.3.3.1",
            "pspp": "1.2.0-bp150.3.3.1",
            "libspread-sheet-widget0": "0.3-bp150.2.1",
            "spread-sheet-widget-devel": "0.3-bp150.2.1"
        }
    ]
}