Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2018:2797-2

Опубликовано: 21 сент. 2018
Источник: suse-cvrf

Описание

Security update for hylafax+

This update for hylafax+ fixes the following issues:

Security issues fixed in 5.6.1:

  • CVE-2018-17141: multiple vulnerabilities affecting fax page reception in JPEG format Specially crafted input may have allowed remote execution of arbitrary code (boo#1109084)

Additionally, this update also contains all upstream corrections and bugfixes in the 5.6.1 version, including:

  • fix RFC2047 encoding by notify
  • add jobcontrol PageSize feature
  • don't wait forever after +FRH:3
  • fix faxmail transition between a message and external types
  • avoid pagehandling from introducing some unnecessary EOM signals
  • improve proxy connection error handling and logging
  • add initial ModemGroup limits feature
  • pass the user's uid onto the session log file for sent faxes
  • improve job waits to minimize triggers
  • add ProxyTaglineFormat and ProxyTSI features

Список пакетов

SUSE Package Hub for SUSE Linux Enterprise 15
hylafax+-5.6.1-bp150.4.3.1
hylafax+-client-5.6.1-bp150.4.3.1
libfaxutil5_6_1-5.6.1-bp150.4.3.1

Ссылки

Описание

HylaFAX 6.0.6 and HylaFAX+ 5.6.0 allow remote attackers to execute arbitrary code via a dial-in session that provides a FAX page with the JPEG bit enabled, which is mishandled in FaxModem::writeECMData() in the faxd/CopyQuality.c++ file.

Затронутые продукты
SUSE Package Hub for SUSE Linux Enterprise 15:hylafax+-5.6.1-bp150.4.3.1
SUSE Package Hub for SUSE Linux Enterprise 15:hylafax+-client-5.6.1-bp150.4.3.1
SUSE Package Hub for SUSE Linux Enterprise 15:libfaxutil5_6_1-5.6.1-bp150.4.3.1
Ссылки