openSUSE Security Update : dosbox (openSUSE-2019-1905)
High Nessus Plugin ID 127997
SynopsisThe remote openSUSE host is missing a security update.
DescriptionThis update for dosbox fixes the following issues :
Security issues fixed :
- CVE-2019-7165: Fixed that a very long line inside a bat file would overflow the parsing buffer (bnc#1140254).
- CVE-2019-12594: Added a basic permission system so that a program running inside DOSBox can't access the contents of /proc (e.g. /proc/self/mem) when / or /proc were (to be) mounted (bnc#1140254).
- Several other fixes for out of bounds access and buffer overflows.
SolutionUpdate the affected dosbox packages.