File _patchinfo of Package patchinfo
<patchinfo incident="6210"> <issue id="1018756" tracker="bnc">VUL-0: CVE-2017-5208,CVE-2017-5331,CVE-2017-5332,CVE-2017-5333: icoutils: exploitable crash in wrestool programm</issue> <issue id="2017-5208" tracker="cve" /> <issue id="2017-5333" tracker="cve" /> <issue id="2017-5332" tracker="cve" /> <issue id="2017-5331" tracker="cve" /> <category>security</category> <rating>important</rating> <packager>Lazy_Kent</packager> <description> This update for icoutils to version 0.31.1 fixes the following issues: - CVE-2017-5208: An integer overflow allows maliciously crafted files to cause DoS or code execution (boo#1018756). - CVE-2017-5331: Incorrect out of bounds checks in check_offset allow for DoS or code execution (boo#1018756). - CVE-2017-5332: Missing out of bounds checks in extract_group_icon_cursor_resource allow for DoS or code execution (boo#1018756). - CVE-2017-5333: Incorrect out of bounds checks in check_offset allow for DoS or code execution (boo#1018756). </description> <summary>Security update for icoutils</summary> </patchinfo>