openSUSE Build Service

Security update for libcaca

This update for libcaca fixes the following issues:

Security issues fixed:

- CVE-2018-20544: Fixed a floating point exception at caca/dither.c (bsc#1120502)
- CVE-2018-20545: Fixed a WRITE memory access in the load_image function at common-image.c for 4bpp (bsc#1120584)
- CVE-2018-20546: Fixed a READ memory access in the get_rgba_default function at caca/dither.c for bpp (bsc#1120503)
- CVE-2018-20547: Fixed a READ memory access in the get_rgba_default function at caca/dither.c for 24bpp (bsc#1120504)
- CVE-2018-20548: Fixed a WRITE memory access in the load_image function at common-image.c for 1bpp (bsc#1120589)
- CVE-2018-20549: Fixed a WRITE memory access in the caca_file_read function at caca/file.c (bsc#1120470)

This update was imported from the SUSE:SLE-15:Update update project.

Submitted by Josef Möllers (jmoellers)

Fixed bugs

bnc#1120470

VUL-1: CVE-2018-20549: libcaca: An integer overflow due to an illegal write in caca/file.c (function caca_file_read)

bnc#1120584

VUL-1: CVE-2018-20545: libcaca: There is an illegal WRITE memory access at common-image.c in load_image for 4bpp data

bnc#1120504

VUL-1: CVE-2018-20547: libcaca: illegal READ memory access at caca/dither.c for 24bpp data

bnc#1120502

VUL-1: CVE-2018-20544: libcaca: floating point exception at caca/dither.c

bnc#1120503

VUL-1: CVE-2018-20546: libcaca: illegal READ memory access at caca/dither.c for the default bpp case

bnc#1120589

VUL-1: CVE-2018-20548: libcaca: There is an illegal WRITE memory access at common-image.c in load_image for 1bpp data

Places

Fixed bugs

Selected Binaries

Places