Security update for libmspack SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:0748-1 Final 1 1 2019-03-26T13:36:00Z current 2019-03-26T13:36:00Z 2019-03-26T13:36:00Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for libmspack This update for libmspack fixes the following issues: Security issues fixed: - CVE-2018-18584: The CAB block input buffer was one byte too small for the maximal Quantum block, leading to an out-of-bounds write. (bsc#1113038) - CVE-2018-18585: chmd_read_headers accepted a filename that has '\0' as its first or second character (such as the '/\0' name). (bsc#1113039) - Fix off-by-one bounds check on CHM PMGI/PMGL chunk numbers and reject empty filenames. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container rancher/elemental-teal-iso/5.4:latest-2019-748,Container rancher/elemental-teal-rt/5.3:latest-2019-748,Container rancher/elemental-teal-rt/5.4:latest-2019-748,Container rancher/elemental-teal/5.3:latest-2019-748,Container rancher/elemental-teal/5.4:latest-2019-748,Container suse/sle-micro-rancher/5.2:latest-2019-748,Container suse/sle-micro-rancher/5.3:latest-2019-748,Container suse/sle-micro-rancher/5.4:latest-2019-748,Image SLES15-SAP-Azure-LI-BYOS-Production-2019-748,Image SLES15-SAP-Azure-VLI-BYOS-Production-2019-748,Image SLES15-SP1-SAP-Azure-LI-BYOS-Production-2019-748,Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production-2019-748,Image SLES15-SP2-SAP-Azure-LI-BYOS-Production-2019-748,Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production-2019-748,Image SLES15-SP3-CHOST-BYOS-SAP-CCloud-2019-748,Image SLES15-SP3-SAP-Azure-LI-BYOS-Production-2019-748,Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production-2019-748,Image SLES15-SP4-CHOST-BYOS-SAP-CCloud-2019-748,Image SLES15-SP4-SAP-Azure-LI-BYOS-2019-748,Image SLES15-SP4-SAP-Azure-LI-BYOS-Production-2019-748,Image SLES15-SP4-SAP-Azure-VLI-BYOS-2019-748,Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production-2019-748,Image SLES15-SP5-CHOST-BYOS-SAP-CCloud-2019-748,SUSE-2019-748,SUSE-SLE-Module-Basesystem-15-2019-748,SUSE-SLE-Module-Development-Tools-OBS-15-2019-748 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-20190748-1/ Link for SUSE-SU-2019:0748-1 https://lists.suse.com/pipermail/sle-security-updates/2019-March/005239.html E-Mail link for SUSE-SU-2019:0748-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1113038 SUSE Bug 1113038 https://bugzilla.suse.com/1113039 SUSE Bug 1113039 https://www.suse.com/security/cve/CVE-2018-18584/ SUSE CVE CVE-2018-18584 page https://www.suse.com/security/cve/CVE-2018-18585/ SUSE CVE CVE-2018-18585 page Container rancher/elemental-teal-iso/5.4:latest Container rancher/elemental-teal-rt/5.3:latest Container rancher/elemental-teal-rt/5.4:latest Container rancher/elemental-teal/5.3:latest Container rancher/elemental-teal/5.4:latest Container suse/sle-micro-rancher/5.2:latest Container suse/sle-micro-rancher/5.3:latest Container suse/sle-micro-rancher/5.4:latest Image SLES15-SAP-Azure-LI-BYOS-Production Image SLES15-SAP-Azure-VLI-BYOS-Production Image SLES15-SP1-SAP-Azure-LI-BYOS-Production Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production Image SLES15-SP2-SAP-Azure-LI-BYOS-Production Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production Image SLES15-SP3-CHOST-BYOS-SAP-CCloud Image SLES15-SP3-SAP-Azure-LI-BYOS-Production Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production Image SLES15-SP4-CHOST-BYOS-SAP-CCloud Image SLES15-SP4-SAP-Azure-LI-BYOS Image SLES15-SP4-SAP-Azure-LI-BYOS-Production Image SLES15-SP4-SAP-Azure-VLI-BYOS Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production Image SLES15-SP5-CHOST-BYOS-SAP-CCloud SUSE Linux Enterprise Module for Basesystem 15 libmspack0-0.6-3.3.11 libmspack-devel-0.6-3.3.11 libmspack0-32bit-0.6-3.3.11 libmspack0-64bit-0.6-3.3.11 mspack-tools-0.6-3.3.11 libmspack0-0.6-3.3.11 as a component of Container rancher/elemental-teal-iso/5.4:latest libmspack0-0.6-3.3.11 as a component of Container rancher/elemental-teal-rt/5.3:latest libmspack0-0.6-3.3.11 as a component of Container rancher/elemental-teal-rt/5.4:latest libmspack0-0.6-3.3.11 as a component of Container rancher/elemental-teal/5.3:latest libmspack0-0.6-3.3.11 as a component of Container rancher/elemental-teal/5.4:latest libmspack0-0.6-3.3.11 as a component of Container suse/sle-micro-rancher/5.2:latest libmspack0-0.6-3.3.11 as a component of Container suse/sle-micro-rancher/5.3:latest libmspack0-0.6-3.3.11 as a component of Container suse/sle-micro-rancher/5.4:latest libmspack0-0.6-3.3.11 as a component of Image SLES15-SAP-Azure-LI-BYOS-Production libmspack0-0.6-3.3.11 as a component of Image SLES15-SAP-Azure-VLI-BYOS-Production libmspack0-0.6-3.3.11 as a component of Image SLES15-SP1-SAP-Azure-LI-BYOS-Production libmspack0-0.6-3.3.11 as a component of Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production libmspack0-0.6-3.3.11 as a component of Image SLES15-SP2-SAP-Azure-LI-BYOS-Production libmspack0-0.6-3.3.11 as a component of Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production libmspack0-0.6-3.3.11 as a component of Image SLES15-SP3-CHOST-BYOS-SAP-CCloud libmspack0-0.6-3.3.11 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production libmspack0-0.6-3.3.11 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production libmspack0-0.6-3.3.11 as a component of Image SLES15-SP4-CHOST-BYOS-SAP-CCloud libmspack0-0.6-3.3.11 as a component of Image SLES15-SP4-SAP-Azure-LI-BYOS libmspack0-0.6-3.3.11 as a component of Image SLES15-SP4-SAP-Azure-LI-BYOS-Production libmspack0-0.6-3.3.11 as a component of Image SLES15-SP4-SAP-Azure-VLI-BYOS libmspack0-0.6-3.3.11 as a component of Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production libmspack0-0.6-3.3.11 as a component of Image SLES15-SP5-CHOST-BYOS-SAP-CCloud libmspack-devel-0.6-3.3.11 as a component of SUSE Linux Enterprise Module for Basesystem 15 libmspack0-0.6-3.3.11 as a component of SUSE Linux Enterprise Module for Basesystem 15 In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block, leading to an out-of-bounds write. CVE-2018-18584 Container rancher/elemental-teal-iso/5.4:latest:libmspack0-0.6-3.3.11 Container rancher/elemental-teal-rt/5.3:latest:libmspack0-0.6-3.3.11 Container rancher/elemental-teal-rt/5.4:latest:libmspack0-0.6-3.3.11 Container rancher/elemental-teal/5.3:latest:libmspack0-0.6-3.3.11 Container rancher/elemental-teal/5.4:latest:libmspack0-0.6-3.3.11 Container suse/sle-micro-rancher/5.2:latest:libmspack0-0.6-3.3.11 Container suse/sle-micro-rancher/5.3:latest:libmspack0-0.6-3.3.11 Container suse/sle-micro-rancher/5.4:latest:libmspack0-0.6-3.3.11 Image SLES15-SAP-Azure-LI-BYOS-Production:libmspack0-0.6-3.3.11 Image SLES15-SAP-Azure-VLI-BYOS-Production:libmspack0-0.6-3.3.11 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libmspack0-0.6-3.3.11 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:libmspack0-0.6-3.3.11 Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:libmspack0-0.6-3.3.11 Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:libmspack0-0.6-3.3.11 Image SLES15-SP3-CHOST-BYOS-SAP-CCloud:libmspack0-0.6-3.3.11 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:libmspack0-0.6-3.3.11 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:libmspack0-0.6-3.3.11 Image SLES15-SP4-CHOST-BYOS-SAP-CCloud:libmspack0-0.6-3.3.11 Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:libmspack0-0.6-3.3.11 Image SLES15-SP4-SAP-Azure-LI-BYOS:libmspack0-0.6-3.3.11 Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:libmspack0-0.6-3.3.11 Image SLES15-SP4-SAP-Azure-VLI-BYOS:libmspack0-0.6-3.3.11 Image SLES15-SP5-CHOST-BYOS-SAP-CCloud:libmspack0-0.6-3.3.11 SUSE Linux Enterprise Module for Basesystem 15:libmspack-devel-0.6-3.3.11 SUSE Linux Enterprise Module for Basesystem 15:libmspack0-0.6-3.3.11 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20190748-1/ https://www.suse.com/security/cve/CVE-2018-18584.html CVE-2018-18584 https://bugzilla.suse.com/1113038 SUSE Bug 1113038 https://bugzilla.suse.com/1113039 SUSE Bug 1113039 chmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0' as its first or second character (such as the "/\0" name). CVE-2018-18585 Container rancher/elemental-teal-iso/5.4:latest:libmspack0-0.6-3.3.11 Container rancher/elemental-teal-rt/5.3:latest:libmspack0-0.6-3.3.11 Container rancher/elemental-teal-rt/5.4:latest:libmspack0-0.6-3.3.11 Container rancher/elemental-teal/5.3:latest:libmspack0-0.6-3.3.11 Container rancher/elemental-teal/5.4:latest:libmspack0-0.6-3.3.11 Container suse/sle-micro-rancher/5.2:latest:libmspack0-0.6-3.3.11 Container suse/sle-micro-rancher/5.3:latest:libmspack0-0.6-3.3.11 Container suse/sle-micro-rancher/5.4:latest:libmspack0-0.6-3.3.11 Image SLES15-SAP-Azure-LI-BYOS-Production:libmspack0-0.6-3.3.11 Image SLES15-SAP-Azure-VLI-BYOS-Production:libmspack0-0.6-3.3.11 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libmspack0-0.6-3.3.11 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:libmspack0-0.6-3.3.11 Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:libmspack0-0.6-3.3.11 Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:libmspack0-0.6-3.3.11 Image SLES15-SP3-CHOST-BYOS-SAP-CCloud:libmspack0-0.6-3.3.11 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:libmspack0-0.6-3.3.11 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:libmspack0-0.6-3.3.11 Image SLES15-SP4-CHOST-BYOS-SAP-CCloud:libmspack0-0.6-3.3.11 Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:libmspack0-0.6-3.3.11 Image SLES15-SP4-SAP-Azure-LI-BYOS:libmspack0-0.6-3.3.11 Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:libmspack0-0.6-3.3.11 Image SLES15-SP4-SAP-Azure-VLI-BYOS:libmspack0-0.6-3.3.11 Image SLES15-SP5-CHOST-BYOS-SAP-CCloud:libmspack0-0.6-3.3.11 SUSE Linux Enterprise Module for Basesystem 15:libmspack-devel-0.6-3.3.11 SUSE Linux Enterprise Module for Basesystem 15:libmspack0-0.6-3.3.11 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20190748-1/ https://www.suse.com/security/cve/CVE-2018-18585.html CVE-2018-18585 https://bugzilla.suse.com/1113038 SUSE Bug 1113038 https://bugzilla.suse.com/1113039 SUSE Bug 1113039