Summary
[0.5-0.7.alpha]
- Fixes for CVE-2018-18584 CVE-2018-18585.
resolves: rhbz#1648384 rhbz#1648385
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | libmspack | 0:0.5-0.7.alpha.el7 |
| Oracle Linux · 7 | libmspack-devel | 0:0.5-0.7.alpha.el7 |
Vulnerabilities 2
-
Unscored —
In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too smal…
-
Unscored —
chmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0' as its first or second…