File _patchinfo of Package patchinfo
<patchinfo incident="8510"> <issue tracker="bnc" id="1061964"></issue> <issue tracker="bnc" id="1058673"></issue> <issue tracker="cve" id="2017-2920"/> <issue tracker="cve" id="2017-2816"/> <category>security</category> <rating>important</rating> <packager>zhengqiang</packager> <description>This update for libofx fixes the following issues: The following security vulnerabilities have been addressed: - CVE-2017-2920: Fixed an exploitable buffer overflow in the tag parsing functionality, which could result in an out of bounds write and could be triggered via a specially crafted OFX file (boo#1061964) - CVE-2017-2816: Fixed another buffer overflow in the tag parsing functionality, which could result in an stack overflow and could be triggered via a specially crafted OFX file (boo#1058673) </description> <summary>Security update for libofx</summary> </patchinfo>