This update for libesmtp fixes the following issues:
- CVE-2019-19977: Fixed stack-based buffer over-read in ntlm/ntlmstruct.c
(bsc#1160462).
This update was imported from the SUSE:SLE-15:Update update project.
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Leap 15.2:
zypper in -t patch openSUSE-2021-1235=1
- openSUSE Leap 15.2 (i586 x86_64):
libesmtp-1.0.6-lp152.4.3.1
libesmtp-debuginfo-1.0.6-lp152.4.3.1
libesmtp-debugsource-1.0.6-lp152.4.3.1
libesmtp-devel-1.0.6-lp152.4.3.1
https://www.suse.com/security/cve/CVE-2019-19977.html
https://bugzilla.suse.com/1160462
https://bugzilla.suse.com/1189097
Get the latest Linux and open source security news straight to your inbox.