7438 moderate openSUSE Leap 42.2 Update This update for libsass fixes the following DoS vulnerabilities: - CVE-2017-11554: Stack consumption vulnerability allowed remote DoS via crafted input (1050148) - CVE-2017-11555: Illegal address access in Eval::operator allowed remote DoS via crafted input (boo#1050149) - CVE-2017-11556: Stack consumption vulnerability allowed remote DoS via crafted input (boo#1050150) - CVE-2017-11605: Heap based buffer over-read allowed remote DoS via crafted input (boo#1050151) - CVE-2017-11608: Heap-based buffer over-read allowed remote DoS via crafted input (boo#1050380) libsass-3.3.2-2.3.1.src.rpm libsass-3_3_2-0-3.3.2-2.3.1.i586.rpm libsass-3_3_2-0-debuginfo-3.3.2-2.3.1.i586.rpm libsass-debugsource-3.3.2-2.3.1.i586.rpm libsass-devel-3.3.2-2.3.1.i586.rpm libsass-3_3_2-0-3.3.2-2.3.1.x86_64.rpm libsass-3_3_2-0-debuginfo-3.3.2-2.3.1.x86_64.rpm libsass-debugsource-3.3.2-2.3.1.x86_64.rpm libsass-devel-3.3.2-2.3.1.x86_64.rpm