edje-1.18.2-5.1 on GA media SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2024:10425-1 Final 1 1 2024-06-15T00:00:00Z current 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z edje-1.18.2-5.1 on GA media These are all security issues fixed in the edje-1.18.2-5.1 package on the GA media of openSUSE Tumbleweed. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-Tumbleweed-2024-10425 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/security/rating/ SUSE Security Ratings https://www.suse.com/security/cve/CVE-2014-4611/ SUSE CVE CVE-2014-4611 page https://www.suse.com/security/cve/CVE-2014-9762/ SUSE CVE CVE-2014-9762 page openSUSE Tumbleweed edje-1.18.2-5.1 efl-1.18.2-5.1 efl-devel-1.18.2-5.1 efl-examples-1.18.2-5.1 efl-testsuite-1.18.2-5.1 elementary-1.18.2-5.1 elementary-examples-1.18.2-5.1 elua-1.18.2-5.1 embryo-1.18.2-5.1 enlightenment-theme-dark-0.21.0-5.1 enlightenment-theme-upstream-0.21.0-5.1 enlightenment-x-dark-icon-theme-1.18.2-5.1 evas-generic-loaders-1.18.2-5.1 libecore1-1.18.2-5.1 libector1-1.18.2-5.1 libedje1-1.18.2-5.1 libeet1-1.18.2-5.1 libeeze1-1.18.2-5.1 libefl1-1.18.2-5.1 libefreet1-1.18.2-5.1 libefreet_mime1-1.18.2-5.1 libefreet_trash1-1.18.2-5.1 libeina1-1.18.2-5.1 libeio1-1.18.2-5.1 libeldbus1-1.18.2-5.1 libelocation1-1.18.2-5.1 libelput1-1.18.2-5.1 libelua1-1.18.2-5.1 libembryo1-1.18.2-5.1 libemile1-1.18.2-5.1 libemotion1-1.18.2-5.1 libeo1-1.18.2-5.1 libeolian1-1.18.2-5.1 libephysics1-1.18.2-5.1 libethumb1-1.18.2-5.1 libethumb_client1-1.18.2-5.1 libevas1-1.18.2-5.1 edje-1.18.2-5.1 as a component of openSUSE Tumbleweed efl-1.18.2-5.1 as a component of openSUSE Tumbleweed efl-devel-1.18.2-5.1 as a component of openSUSE Tumbleweed efl-examples-1.18.2-5.1 as a component of openSUSE Tumbleweed efl-testsuite-1.18.2-5.1 as a component of openSUSE Tumbleweed elementary-1.18.2-5.1 as a component of openSUSE Tumbleweed elementary-examples-1.18.2-5.1 as a component of openSUSE Tumbleweed elua-1.18.2-5.1 as a component of openSUSE Tumbleweed embryo-1.18.2-5.1 as a component of openSUSE Tumbleweed enlightenment-theme-dark-0.21.0-5.1 as a component of openSUSE Tumbleweed enlightenment-theme-upstream-0.21.0-5.1 as a component of openSUSE Tumbleweed enlightenment-x-dark-icon-theme-1.18.2-5.1 as a component of openSUSE Tumbleweed evas-generic-loaders-1.18.2-5.1 as a component of openSUSE Tumbleweed libecore1-1.18.2-5.1 as a component of openSUSE Tumbleweed libector1-1.18.2-5.1 as a component of openSUSE Tumbleweed libedje1-1.18.2-5.1 as a component of openSUSE Tumbleweed libeet1-1.18.2-5.1 as a component of openSUSE Tumbleweed libeeze1-1.18.2-5.1 as a component of openSUSE Tumbleweed libefl1-1.18.2-5.1 as a component of openSUSE Tumbleweed libefreet1-1.18.2-5.1 as a component of openSUSE Tumbleweed libefreet_mime1-1.18.2-5.1 as a component of openSUSE Tumbleweed libefreet_trash1-1.18.2-5.1 as a component of openSUSE Tumbleweed libeina1-1.18.2-5.1 as a component of openSUSE Tumbleweed libeio1-1.18.2-5.1 as a component of openSUSE Tumbleweed libeldbus1-1.18.2-5.1 as a component of openSUSE Tumbleweed libelocation1-1.18.2-5.1 as a component of openSUSE Tumbleweed libelput1-1.18.2-5.1 as a component of openSUSE Tumbleweed libelua1-1.18.2-5.1 as a component of openSUSE Tumbleweed libembryo1-1.18.2-5.1 as a component of openSUSE Tumbleweed libemile1-1.18.2-5.1 as a component of openSUSE Tumbleweed libemotion1-1.18.2-5.1 as a component of openSUSE Tumbleweed libeo1-1.18.2-5.1 as a component of openSUSE Tumbleweed libeolian1-1.18.2-5.1 as a component of openSUSE Tumbleweed libephysics1-1.18.2-5.1 as a component of openSUSE Tumbleweed libethumb1-1.18.2-5.1 as a component of openSUSE Tumbleweed libethumb_client1-1.18.2-5.1 as a component of openSUSE Tumbleweed libevas1-1.18.2-5.1 as a component of openSUSE Tumbleweed Integer overflow in the LZ4 algorithm implementation, as used in Yann Collet LZ4 before r118 and in the lz4_uncompress function in lib/lz4/lz4_decompress.c in the Linux kernel before 3.15.2, on 32-bit platforms might allow context-dependent attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted Literal Run that would be improperly handled by programs not complying with an API limitation, a different vulnerability than CVE-2014-4715. CVE-2014-4611 openSUSE Tumbleweed:edje-1.18.2-5.1 openSUSE Tumbleweed:efl-1.18.2-5.1 openSUSE Tumbleweed:efl-devel-1.18.2-5.1 openSUSE Tumbleweed:efl-examples-1.18.2-5.1 openSUSE Tumbleweed:efl-testsuite-1.18.2-5.1 openSUSE Tumbleweed:elementary-1.18.2-5.1 openSUSE Tumbleweed:elementary-examples-1.18.2-5.1 openSUSE Tumbleweed:elua-1.18.2-5.1 openSUSE Tumbleweed:embryo-1.18.2-5.1 openSUSE Tumbleweed:enlightenment-theme-dark-0.21.0-5.1 openSUSE Tumbleweed:enlightenment-theme-upstream-0.21.0-5.1 openSUSE Tumbleweed:enlightenment-x-dark-icon-theme-1.18.2-5.1 openSUSE Tumbleweed:evas-generic-loaders-1.18.2-5.1 openSUSE Tumbleweed:libecore1-1.18.2-5.1 openSUSE Tumbleweed:libector1-1.18.2-5.1 openSUSE Tumbleweed:libedje1-1.18.2-5.1 openSUSE Tumbleweed:libeet1-1.18.2-5.1 openSUSE Tumbleweed:libeeze1-1.18.2-5.1 openSUSE Tumbleweed:libefl1-1.18.2-5.1 openSUSE Tumbleweed:libefreet1-1.18.2-5.1 openSUSE Tumbleweed:libefreet_mime1-1.18.2-5.1 openSUSE Tumbleweed:libefreet_trash1-1.18.2-5.1 openSUSE Tumbleweed:libeina1-1.18.2-5.1 openSUSE Tumbleweed:libeio1-1.18.2-5.1 openSUSE Tumbleweed:libeldbus1-1.18.2-5.1 openSUSE Tumbleweed:libelocation1-1.18.2-5.1 openSUSE Tumbleweed:libelput1-1.18.2-5.1 openSUSE Tumbleweed:libelua1-1.18.2-5.1 openSUSE Tumbleweed:libembryo1-1.18.2-5.1 openSUSE Tumbleweed:libemile1-1.18.2-5.1 openSUSE Tumbleweed:libemotion1-1.18.2-5.1 openSUSE Tumbleweed:libeo1-1.18.2-5.1 openSUSE Tumbleweed:libeolian1-1.18.2-5.1 openSUSE Tumbleweed:libephysics1-1.18.2-5.1 openSUSE Tumbleweed:libethumb1-1.18.2-5.1 openSUSE Tumbleweed:libethumb_client1-1.18.2-5.1 openSUSE Tumbleweed:libevas1-1.18.2-5.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-4611.html CVE-2014-4611 https://bugzilla.suse.com/883949 SUSE Bug 883949 https://bugzilla.suse.com/885389 SUSE Bug 885389 imlib2 before 1.4.7 allows remote attackers to cause a denial of service (segmentation fault) via a GIF image without a colormap. CVE-2014-9762 openSUSE Tumbleweed:edje-1.18.2-5.1 openSUSE Tumbleweed:efl-1.18.2-5.1 openSUSE Tumbleweed:efl-devel-1.18.2-5.1 openSUSE Tumbleweed:efl-examples-1.18.2-5.1 openSUSE Tumbleweed:efl-testsuite-1.18.2-5.1 openSUSE Tumbleweed:elementary-1.18.2-5.1 openSUSE Tumbleweed:elementary-examples-1.18.2-5.1 openSUSE Tumbleweed:elua-1.18.2-5.1 openSUSE Tumbleweed:embryo-1.18.2-5.1 openSUSE Tumbleweed:enlightenment-theme-dark-0.21.0-5.1 openSUSE Tumbleweed:enlightenment-theme-upstream-0.21.0-5.1 openSUSE Tumbleweed:enlightenment-x-dark-icon-theme-1.18.2-5.1 openSUSE Tumbleweed:evas-generic-loaders-1.18.2-5.1 openSUSE Tumbleweed:libecore1-1.18.2-5.1 openSUSE Tumbleweed:libector1-1.18.2-5.1 openSUSE Tumbleweed:libedje1-1.18.2-5.1 openSUSE Tumbleweed:libeet1-1.18.2-5.1 openSUSE Tumbleweed:libeeze1-1.18.2-5.1 openSUSE Tumbleweed:libefl1-1.18.2-5.1 openSUSE Tumbleweed:libefreet1-1.18.2-5.1 openSUSE Tumbleweed:libefreet_mime1-1.18.2-5.1 openSUSE Tumbleweed:libefreet_trash1-1.18.2-5.1 openSUSE Tumbleweed:libeina1-1.18.2-5.1 openSUSE Tumbleweed:libeio1-1.18.2-5.1 openSUSE Tumbleweed:libeldbus1-1.18.2-5.1 openSUSE Tumbleweed:libelocation1-1.18.2-5.1 openSUSE Tumbleweed:libelput1-1.18.2-5.1 openSUSE Tumbleweed:libelua1-1.18.2-5.1 openSUSE Tumbleweed:libembryo1-1.18.2-5.1 openSUSE Tumbleweed:libemile1-1.18.2-5.1 openSUSE Tumbleweed:libemotion1-1.18.2-5.1 openSUSE Tumbleweed:libeo1-1.18.2-5.1 openSUSE Tumbleweed:libeolian1-1.18.2-5.1 openSUSE Tumbleweed:libephysics1-1.18.2-5.1 openSUSE Tumbleweed:libethumb1-1.18.2-5.1 openSUSE Tumbleweed:libethumb_client1-1.18.2-5.1 openSUSE Tumbleweed:libevas1-1.18.2-5.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-9762.html CVE-2014-9762 https://bugzilla.suse.com/963796 SUSE Bug 963796 https://bugzilla.suse.com/963797 SUSE Bug 963797 https://bugzilla.suse.com/963800 SUSE Bug 963800