File _patchinfo of Package patchinfo.42054

<patchinfo incident="42054">
  <issue tracker="bnc" id="1255310">VUL-0: CVE-2025-68114: capstone: Unchecked vsnprintf return in SStream_concat allows stack buffer underflow&amp;overflow</issue>
  <issue tracker="bnc" id="1255309">VUL-0: CVE-2025-67873: capstone: Skipdata length unchecked leads to cs_insn.bytes heap buffer overflow</issue>
  <issue tracker="cve" id="2025-68114"/>
  <issue tracker="cve" id="2025-67873"/>
  <packager>dfaggioli</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for capstone</summary>
  <description>This update for capstone fixes the following issues:

Security issues fixed: 

- CVE-2025-67873: missing bounds check on user-provided skipdata callback can lead to a heap buffer overflow
  (bsc#1255309).
- CVE-2025-68114: unchecked `vsnprintf` return value can lead to a stack buffer overflow (bsc#1255310).

Other updates and bugfixes:

- Enable static library, and add `libcapstone-devel-static` subpackage.
</description>
</patchinfo>
openSUSE Build Service is sponsored by