Revision Date: | 2019-06-17 | Version: | 1 |
Title: | Security update for netpbm (Moderate) |
Description: |
This update for netpbm fixes the following issues:
Security issues fixed:
- CVE-2017-2579: Fixed out-of-bounds read in expandCodeOntoStack() (bsc#1024288). - CVE-2017-2580: Fixed out-of-bounds write of heap data in addPixelToRaster() function (bsc#1024291). - create netpbm-vulnerable subpackage and move pstopnm there, as ghostscript is used to convert (bsc#1136936)
|
Family: | unix | Class: | patch |
Status: | | Reference(s): | 1024288 1024291 1136936 CVE-2017-2579 CVE-2017-2580 SUSE-SU-2019:1525-1
|
Platform(s): | SUSE Linux Enterprise Desktop 15 SP1 SUSE Linux Enterprise High Performance Computing 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Server 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Storage 6 SUSE Manager Proxy 4.0 SUSE Manager Server 4.0
| Product(s): | |
Definition Synopsis |
SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed AND Package Information
libnetpbm11-10.80.1-3.8.2 is installed
OR netpbm-10.80.1-3.8.2 is installed
|