Описание
Security update for rzsz
This update for rzsz fixes the following issues:
-
Update to 0.12.21~rc to fix bsc#1086416 and bsc#1090051
-
CVE-2018-10195: segmentation fault in zsdata function could lead to denial of service (bsc#1090051)
Список пакетов
SUSE Linux Enterprise Desktop 12 SP3
rzsz-0.12.21~rc-1001.3.1
SUSE Linux Enterprise Server 12 SP3
rzsz-0.12.21~rc-1001.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
rzsz-0.12.21~rc-1001.3.1
Ссылки
- Link for SUSE-SU-2018:1066-1
- E-Mail link for SUSE-SU-2018:1066-1
- SUSE Security Ratings
- SUSE Bug 1076576
- SUSE Bug 1086416
- SUSE Bug 1090051
- SUSE CVE CVE-2018-10195 page
Описание
lrzsz before version 0.12.21~rc can leak information to the receiving side due to an incorrect length check in the function zsdata that causes a size_t to wrap around.
Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP3:rzsz-0.12.21~rc-1001.3.1
SUSE Linux Enterprise Server 12 SP3:rzsz-0.12.21~rc-1001.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3:rzsz-0.12.21~rc-1001.3.1
Ссылки
- CVE-2018-10195
- SUSE Bug 1090051
- SUSE Bug 1149678