Advisories » MGASA-2016-0390

Updated gnuchess packages fix security vulnerability

Publication date: 17 Nov 2016
Modification date: 17 Nov 2016
Type: security
Affected Mageia releases : 5
CVE: CVE-2015-8972

Description

gnuchess before 6.2.4 is vulnerable to a stack buffer overflow related to
user move input, where 160 characters of input can crash gnuchess
(CVE-2015-8972).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=19784
• http://openwall.com/lists/oss-security/2016/11/14/12
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8972

SRPMS

5/core

• gnuchess-6.1.1-3.1.mga5