Recommended update for boost-legacy SUSE Patch security@suse.de SUSE Security Team SUSE-RU-2021:1414-1 Final 1 1 2021-04-28T16:32:16Z current 2021-04-28T16:32:16Z 2021-04-28T16:32:16Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Recommended update for boost-legacy This update for boost-legacy fixes the following issues: Create a new boost-legacy package with version 1.66.0. (bsc#1175886, jsc#SLE-17304, jsc#ECO-3147) - Remove duplicate license package that we get from original Boost - Add a backport of `Boost.Optional::has_value()` for LibreOffice - Use `%license` instead of `%doc` (bsc#1082318) - Multibuild requires versioned `Name: tag` . (bsc#1076640) Changes in version 1.66.0: - `Beast`: new portable HTTP, WebSocket and network operations using `Boost.Asio`. Header-only library. - `Callable Traits`: new library and successor to `Boost.FunctionTypes`. Header-only library. - `Mp11:` new metaprogramming library - ` Asio`: - implemented interface changes to reflect the Networking TS (N4656) - functions and classes that have been superseded by Networking TS functionality have been deprecated. - added support for customized handler tracking - removed previously deprecated functions - `Atomic`: improved compatibility with GCC 7. 128-bit operations on `x86_64` no longer require linking with compiled library. - `DateTime`: Fixed an integral overflow that could cause incorrect results when adding or subtracting many years from a date. - `Format`: New format specifiers added and volatile arguments can not be safely used with operator`%` - `Fusion`: - fix compile error with `std::array` - remove circular preprocessor include - `PolyCollection`: backported to GCC 4.8 and 4.9 with some limitations - `Uuid`: added `RTF-4122` namespaces in `boost::uuids::ns` The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2021-1414,SUSE-SLE-Module-Legacy-15-SP2-2021-1414 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement//suse-ru-20211414-1/ Link for SUSE-RU-2021:1414-1 https://lists.suse.com/pipermail/sle-updates/2021-April/018724.html E-Mail link for SUSE-RU-2021:1414-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1006584 SUSE Bug 1006584 https://bugzilla.suse.com/1038083 SUSE Bug 1038083 https://bugzilla.suse.com/1076640 SUSE Bug 1076640 https://bugzilla.suse.com/1082318 SUSE Bug 1082318 https://bugzilla.suse.com/1175886 SUSE Bug 1175886 https://bugzilla.suse.com/401964 SUSE Bug 401964 https://bugzilla.suse.com/439805 SUSE Bug 439805 https://bugzilla.suse.com/457699 SUSE Bug 457699 https://bugzilla.suse.com/461372 SUSE Bug 461372 https://bugzilla.suse.com/477603 SUSE Bug 477603 https://bugzilla.suse.com/479659 SUSE Bug 479659 https://bugzilla.suse.com/544958 SUSE Bug 544958 https://bugzilla.suse.com/621140 SUSE Bug 621140 https://bugzilla.suse.com/655747 SUSE Bug 655747 https://bugzilla.suse.com/714373 SUSE Bug 714373 https://bugzilla.suse.com/765443 SUSE Bug 765443 https://bugzilla.suse.com/951902 SUSE Bug 951902 https://bugzilla.suse.com/958150 SUSE Bug 958150 https://bugzilla.suse.com/994378 SUSE Bug 994378 https://bugzilla.suse.com/994381 SUSE Bug 994381 https://bugzilla.suse.com/994382 SUSE Bug 994382 https://bugzilla.suse.com/994383 SUSE Bug 994383 https://bugzilla.suse.com/996917 SUSE Bug 996917 https://www.suse.com/security/cve/CVE-2008-0171/ SUSE CVE CVE-2008-0171 page SUSE Linux Enterprise Module for Legacy 15 SP2 libboost_atomic_legacy-1.66.0-1.4.1 libboost_atomic_legacy-32bit-1.66.0-1.4.1 libboost_atomic_legacy-64bit-1.66.0-1.4.1 libboost_chrono_legacy-1.66.0-1.4.1 libboost_container_legacy-1.66.0-1.4.1 libboost_container_legacy-32bit-1.66.0-1.4.1 libboost_container_legacy-64bit-1.66.0-1.4.1 libboost_context_legacy-1.66.0-1.4.1 libboost_context_legacy-32bit-1.66.0-1.4.1 libboost_context_legacy-64bit-1.66.0-1.4.1 libboost_coroutine_legacy-1.66.0-1.4.1 libboost_coroutine_legacy-32bit-1.66.0-1.4.1 libboost_coroutine_legacy-64bit-1.66.0-1.4.1 libboost_date_time_legacy-1.66.0-1.4.1 libboost_date_time_legacy-32bit-1.66.0-1.4.1 libboost_date_time_legacy-64bit-1.66.0-1.4.1 libboost_fiber_legacy-1.66.0-1.4.1 libboost_fiber_legacy-32bit-1.66.0-1.4.1 libboost_fiber_legacy-64bit-1.66.0-1.4.1 libboost_filesystem_legacy-1.66.0-1.4.1 libboost_filesystem_legacy-32bit-1.66.0-1.4.1 libboost_filesystem_legacy-64bit-1.66.0-1.4.1 libboost_graph_legacy-1.66.0-1.4.1 libboost_graph_legacy-32bit-1.66.0-1.4.1 libboost_graph_legacy-64bit-1.66.0-1.4.1 libboost_iostreams_legacy-1.66.0-1.4.1 libboost_iostreams_legacy-32bit-1.66.0-1.4.1 libboost_iostreams_legacy-64bit-1.66.0-1.4.1 libboost_locale_legacy-1.66.0-1.4.1 libboost_locale_legacy-32bit-1.66.0-1.4.1 libboost_locale_legacy-64bit-1.66.0-1.4.1 libboost_log_legacy-1.66.0-1.4.1 libboost_math_legacy-1.66.0-1.4.1 libboost_math_legacy-32bit-1.66.0-1.4.1 libboost_math_legacy-64bit-1.66.0-1.4.1 libboost_program_options_legacy-1.66.0-1.4.1 libboost_program_options_legacy-32bit-1.66.0-1.4.1 libboost_program_options_legacy-64bit-1.66.0-1.4.1 libboost_random_legacy-1.66.0-1.4.1 libboost_random_legacy-32bit-1.66.0-1.4.1 libboost_random_legacy-64bit-1.66.0-1.4.1 libboost_regex_legacy-1.66.0-1.4.1 libboost_regex_legacy-32bit-1.66.0-1.4.1 libboost_regex_legacy-64bit-1.66.0-1.4.1 libboost_serialization_legacy-1.66.0-1.4.1 libboost_serialization_legacy-32bit-1.66.0-1.4.1 libboost_serialization_legacy-64bit-1.66.0-1.4.1 libboost_signals_legacy-1.66.0-1.4.1 libboost_signals_legacy-32bit-1.66.0-1.4.1 libboost_signals_legacy-64bit-1.66.0-1.4.1 libboost_stacktrace_legacy-1.66.0-1.4.1 libboost_stacktrace_legacy-32bit-1.66.0-1.4.1 libboost_stacktrace_legacy-64bit-1.66.0-1.4.1 libboost_system_legacy-1.66.0-1.4.1 libboost_system_legacy-32bit-1.66.0-1.4.1 libboost_system_legacy-64bit-1.66.0-1.4.1 libboost_test_legacy-1.66.0-1.4.1 libboost_test_legacy-32bit-1.66.0-1.4.1 libboost_test_legacy-64bit-1.66.0-1.4.1 libboost_thread_legacy-1.66.0-1.4.1 libboost_thread_legacy-32bit-1.66.0-1.4.1 libboost_thread_legacy-64bit-1.66.0-1.4.1 libboost_timer_legacy-1.66.0-1.4.1 libboost_type_erasure_legacy-1.66.0-1.4.1 libboost_type_erasure_legacy-32bit-1.66.0-1.4.1 libboost_type_erasure_legacy-64bit-1.66.0-1.4.1 libboost_wave_legacy-1.66.0-1.4.1 libboost_wave_legacy-32bit-1.66.0-1.4.1 libboost_wave_legacy-64bit-1.66.0-1.4.1 libboost_locale_legacy-1.66.0-1.4.1 as a component of SUSE Linux Enterprise Module for Legacy 15 SP2 libboost_regex_legacy-1.66.0-1.4.1 as a component of SUSE Linux Enterprise Module for Legacy 15 SP2 regex/v4/perl_matcher_non_recursive.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service (failed assertion and crash) via an invalid regular expression. CVE-2008-0171 SUSE Linux Enterprise Module for Legacy 15 SP2:libboost_locale_legacy-1.66.0-1.4.1 SUSE Linux Enterprise Module for Legacy 15 SP2:libboost_regex_legacy-1.66.0-1.4.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement//suse-ru-20211414-1/ https://www.suse.com/security/cve/CVE-2008-0171.html CVE-2008-0171 https://bugzilla.suse.com/353180 SUSE Bug 353180