Advisories » MGASA-2015-0139

Updated less packages fix CVE-2014-9488

Publication date: 09 Apr 2015
Modification date: 09 Apr 2015
Type: security
Affected Mageia releases : 4
CVE: CVE-2014-9488

Description

Updated less package fixes security vulnerability:

Malformed UTF-8 data could have caused an out of bounds read in the UTF-8
decoding routines, causing an invalid read access (CVE-2014-9488).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=15567
• http://lists.opensuse.org/opensuse-updates/2015-03/msg00077.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9488

SRPMS

4/core

• less-458-2.1.mga4