Описание
Security update for openslp
This update for openslp fixes the following issues:
- CVE-2017-17833: Prevent heap-related memory corruption issue which may have manifested itself as a denial-of-service or a remote code-execution vulnerability (bsc#1090638)
- Prevent out of bounds reads in message parsing
This update was imported from the SUSE:SLE-15:Update update project.
Список пакетов
openSUSE Leap 15.0
openslp-2.0.0-lp150.5.3.1
openslp-32bit-2.0.0-lp150.5.3.1
openslp-devel-2.0.0-lp150.5.3.1
openslp-server-2.0.0-lp150.5.3.1
Ссылки
- E-Mail link for openSUSE-SU-2018:1958-1
- SUSE Security Ratings
Описание
OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution vulnerability.
Затронутые продукты
openSUSE Leap 15.0:openslp-2.0.0-lp150.5.3.1
openSUSE Leap 15.0:openslp-32bit-2.0.0-lp150.5.3.1
openSUSE Leap 15.0:openslp-devel-2.0.0-lp150.5.3.1
openSUSE Leap 15.0:openslp-server-2.0.0-lp150.5.3.1
Ссылки
- CVE-2017-17833
- SUSE Bug 1090638
- SUSE Bug 1099519