Alerts This Week
Warning Icon 1 535
Alerts This Week
Warning Icon 1 535

SUSE: 2020:0957-1 Moderate: mgetty Denial Of Service Issue

suse
Calendar Grey April 8, 2020
Dist Suse Esm H88
SUSE Security Patch for mgetty addresses a denial of service vulnerability along with permission issues. Key update information provided.
An update that solves one vulnerability and has one errata is now available

Summary

This update for mgetty fixes the following issues: - CVE-2019-1010190: Fixed a denial of service which could be caused by a local attacker in putwhitespan() (bsc#1142770). - Fixed a permission issue which have resulted in build failures (bsc#1168170). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1: zypper in -t patch SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2020-957=1 - SUSE Linux Enterprise Module for Basesystem 15-SP1: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP1-2020-957=1 Package List:

References

#1142770 #1168170

Cross- CVE-2019-1010190

Affected Products:

SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1

SUSE Linux Enterprise Module for Basesystem 15-SP1

https://www.suse.com/security/cve/CVE-2019-1010190.html

https://bugzilla.suse.com/1142770

https://bugzilla.suse.com/1168170

Announcement ID: SUSE-SU-2020:0957-1
Rating: moderate

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here