SUSE-RU-2021:1414-1

    Dashboard / Vulnerabilities / SUSE-RU-2021:1414-1

    SUSE-RU-2021:1414-1

    Published: 28 Apr 2021Last Modified: 2 May 2025
    Upstream:
    CVE-2008-0171
    Aliases:
    CVE-2008-0171

    Summary: Recommended update for boost-legacy

    Details: This update for boost-legacy fixes the following issues: Create a new boost-legacy package with version 1.66.0. (bsc#1175886, jsc#SLE-17304, jsc#ECO-3147) - Remove duplicate license package that we get from original Boost - Add a backport of `Boost.Optional::has_value()` for LibreOffice - Use `%license` instead of `%doc` (bsc#1082318) - Multibuild requires versioned `Name: tag` . (bsc#1076640) Changes in version 1.66.0: - `Beast`: new portable HTTP, WebSocket and network operations using `Boost.Asio`. Header-only library. - `Callable Traits`: new library and successor to `Boost.FunctionTypes`. Header-only library. - `Mp11:` new metaprogramming library - ` Asio`: - implemented interface changes to reflect the Networking TS (N4656) - functions and classes that have been superseded by Networking TS functionality have been deprecated. - added support for customized handler tracking - removed previously deprecated functions - `Atomic`: improved compatibility with GCC 7. 128-bit operations on `x86_64` no longer require linking with compiled library. - `DateTime`: Fixed an integral overflow that could cause incorrect results when adding or subtracting many years from a date. - `Format`: New format specifiers added and volatile arguments can not be safely used with operator`%` - `Fusion`: - fix compile error with `std::array` - remove circular preprocessor include - `PolyCollection`: backported to GCC 4.8 and 4.9 with some limitations - `Uuid`: added `RTF-4122` namespaces in `boost::uuids::ns`

    References: https://www.suse.com/support/update/announcement/-2021-1414/suse-ru-20211414-1/, https://bugzilla.suse.com/1006584, https://bugzilla.suse.com/1038083, https://bugzilla.suse.com/1076640, https://bugzilla.suse.com/1082318, https://bugzilla.suse.com/1175886, https://bugzilla.suse.com/401964, https://bugzilla.suse.com/439805, https://bugzilla.suse.com/457699, https://bugzilla.suse.com/461372, https://bugzilla.suse.com/477603, https://bugzilla.suse.com/479659, https://bugzilla.suse.com/544958, https://bugzilla.suse.com/621140, https://bugzilla.suse.com/655747, https://bugzilla.suse.com/714373, https://bugzilla.suse.com/765443, https://bugzilla.suse.com/951902, https://bugzilla.suse.com/958150, https://bugzilla.suse.com/994378, https://bugzilla.suse.com/994381, https://bugzilla.suse.com/994382, https://bugzilla.suse.com/994383, https://bugzilla.suse.com/996917, https://www.suse.com/security/cve/CVE-2008-0171

    Affected packages

    Package

    Name: boost-legacy-base

    Purl: pkg:rpm/suse/boost-legacy-base&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015%20SP2

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -1.66.0-1.4.1

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    SUSE-RU-2021:1414-1 | CVE-DB