Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2021:1235-1

Опубликовано: 07 сент. 2021
Источник: suse-cvrf

Описание

Security update for libesmtp

This update for libesmtp fixes the following issues:

  • CVE-2019-19977: Fixed stack-based buffer over-read in ntlm/ntlmstruct.c (bsc#1160462).

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.2
libesmtp-1.0.6-lp152.4.3.1
libesmtp-devel-1.0.6-lp152.4.3.1

Ссылки

Описание

libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlm_build_type_2 in ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read.

Затронутые продукты
openSUSE Leap 15.2:libesmtp-1.0.6-lp152.4.3.1
openSUSE Leap 15.2:libesmtp-devel-1.0.6-lp152.4.3.1
Ссылки