{"id":"openSUSE-SU-2019:2077-1","summary":"Security update for libmirage","details":"This update for libmirage fixes the following issues:\n\nCVE-2019-15540: The CSO filter in libMirage in CDemu did not validate the part size,\ntriggering a heap-based buffer overflow that could lead to root access by a local user.\n[boo#1148087]\n\n- Update to new upstream release 3.2.2\n  * ISO parser: fixed ISO9660/UDF pattern search for sector\n    sizes 2332 and 2336.\n  * ISO parser: added support for Nintendo GameCube and Wii\n    ISO images.\n  * Extended medium type guess to distinguish between DVD and\n    BluRay images based on length.\n  * Removed fabrication of disc structures from the library\n    (moved to CDEmu daemon).\n  * MDS parser: cleanup of disc structure parsing, fixed the\n    incorrectly set structure sizes.\n\nThis update was imported from the openSUSE:Leap:15.0:Update update project.","modified":"2026-02-04T03:45:08.683603Z","published":"2019-09-06T08:21:33Z","related":["CVE-2019-15540"],"upstream":["CVE-2019-15540"],"references":[{"type":"ADVISORY","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5RA6THTK6UZUJQU56AIXU4INYRAVL57T/#5RA6THTK6UZUJQU56AIXU4INYRAVL57T"},{"type":"REPORT","url":"https://bugzilla.suse.com/1148087"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-15540"}],"affected":[{"package":{"name":"libmirage","ecosystem":"SUSE:Package Hub 15","purl":"pkg:rpm/suse/libmirage&distro=SUSE%20Package%20Hub%2015"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-bp151.4.3.1"}]}],"ecosystem_specific":{"binaries":[{"libmirage-3_2":"3.2.2-bp151.4.3.1","libmirage-data":"3.2.2-bp151.4.3.1","libmirage-devel":"3.2.2-bp151.4.3.1","libmirage-lang":"3.2.2-bp151.4.3.1","libmirage11":"3.2.2-bp151.4.3.1","typelib-1_0-libmirage-3_2":"3.2.2-bp151.4.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2019:2077-1.json"}},{"package":{"name":"libmirage","ecosystem":"SUSE:Package Hub 15 SP1","purl":"pkg:rpm/suse/libmirage&distro=SUSE%20Package%20Hub%2015%20SP1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-bp151.4.3.1"}]}],"ecosystem_specific":{"binaries":[{"libmirage-3_2":"3.2.2-bp151.4.3.1","libmirage-data":"3.2.2-bp151.4.3.1","libmirage-devel":"3.2.2-bp151.4.3.1","libmirage-lang":"3.2.2-bp151.4.3.1","libmirage11":"3.2.2-bp151.4.3.1","typelib-1_0-libmirage-3_2":"3.2.2-bp151.4.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2019:2077-1.json"}}],"schema_version":"1.7.3"}