Most recent entries from all

ALSA-2020:1686 — Low: libmspack security and bug fix update

Affected: AlmaLinux:8: libmspack, AlmaLinux:8: libmspack-devel

The libmspack packages contain a library providing compression and extraction of the Cabinet (CAB) file format used by Microsoft.

Security Fix(es):

* libmspack: buffer overflow in function chmd_read_headers() (CVE-2019-1010305)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2020-01531

cnvd-2019-23044

EUVD-2026-60632

fkie_cve-2019-1010305

libmspack 0.9.1alpha is affected by: Buffer Overflow. The impact is: Information Disclosure. The component is: function chmd_read_headers() in libmspack(file libmspack/mspack/chmd.c). The attack vector is: the victim must open a specially crafted chm file. The fixed version is: after commit 2f084136cfe0d05e5bf5703f3e83c6d955234b4d.

GHSA-w7hv-jwj8-qh4r

gsd-2019-1010305

openSUSE-SU-2020:0746-1 — Security update for libmspack

Security update for libmspack

SUSE-SU-2020:1493-1 — Security update for libmspack

Security update for libmspack

UBUNTU-CVE-2019-1010305

Affected: Ubuntu:Pro:14.04:LTS: clamav, Ubuntu:Pro:14.04:LTS: libmspack, Ubuntu:16.04:LTS: libmspack, Ubuntu:18.04:LTS: libmspack, Ubuntu:20.04:LTS: libmspack

WID-SEC-W-2025-2180 — Red Hat libmspack: Schwachstelle ermöglicht Offenlegung von Informationen

Ein Angreifer kann eine Schwachstelle in Red Hat libmspack ausnutzen, um Informationen offenzulegen.