{"affected":[{"ecosystem_specific":{"binaries":[{"libmirage-3_2":"3.2.2-bp151.4.3.1","libmirage-data":"3.2.2-bp151.4.3.1","libmirage-devel":"3.2.2-bp151.4.3.1","libmirage-lang":"3.2.2-bp151.4.3.1","libmirage11":"3.2.2-bp151.4.3.1","typelib-1_0-libmirage-3_2":"3.2.2-bp151.4.3.1"}]},"package":{"ecosystem":"SUSE:Package Hub 15","name":"libmirage","purl":"purl:rpm/suse/libmirage&distro=SUSE%20Package%20Hub%2015"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"3.2.2-bp151.4.3.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libmirage-3_2":"3.2.2-bp151.4.3.1","libmirage-data":"3.2.2-bp151.4.3.1","libmirage-devel":"3.2.2-bp151.4.3.1","libmirage-lang":"3.2.2-bp151.4.3.1","libmirage11":"3.2.2-bp151.4.3.1","typelib-1_0-libmirage-3_2":"3.2.2-bp151.4.3.1"}]},"package":{"ecosystem":"SUSE:Package Hub 15 SP1","name":"libmirage","purl":"purl:rpm/suse/libmirage&distro=SUSE%20Package%20Hub%2015%20SP1"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"3.2.2-bp151.4.3.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for libmirage fixes the following issues:\n\nCVE-2019-15540: The CSO filter in libMirage in CDemu did not validate the part size,\ntriggering a heap-based buffer overflow that could lead to root access by a local user.\n[boo#1148087]\n\n- Update to new upstream release 3.2.2\n  * ISO parser: fixed ISO9660/UDF pattern search for sector\n    sizes 2332 and 2336.\n  * ISO parser: added support for Nintendo GameCube and Wii\n    ISO images.\n  * Extended medium type guess to distinguish between DVD and\n    BluRay images based on length.\n  * Removed fabrication of disc structures from the library\n    (moved to CDEmu daemon).\n  * MDS parser: cleanup of disc structure parsing, fixed the\n    incorrectly set structure sizes.\n\nThis update was imported from the openSUSE:Leap:15.0:Update update project.","id":"openSUSE-SU-2019:2077-1","modified":"2019-09-06T08:21:33Z","published":"2019-09-06T08:21:33Z","references":[{"type":"ADVISORY","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5RA6THTK6UZUJQU56AIXU4INYRAVL57T/#5RA6THTK6UZUJQU56AIXU4INYRAVL57T"},{"type":"REPORT","url":"https://bugzilla.suse.com/1148087"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-15540"}],"related":["CVE-2019-15540"],"summary":"Security update for libmirage"}