Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

SUSE: 2020:2687-1 Moderate: Less UTF-8 Malformed Data Issue

suse
Calendar Grey September 21, 2020
Dist Suse Esm H88
Security patch for less in SUSE addressing a moderate vulnerability related to improper handling of UTF-8 characters. Detailed installation guidance included.
An update that fixes one vulnerability is now available

Summary

This update for less fixes the following issues: Security issue fixed: - CVE-2014-9488: Malformed UTF-8 data could have caused an out of bounds read in the UTF-8 decoding routines, causing an invalid read access (bsc#921719). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 12-SP5: zypper in -t patch SUSE-SLE-SERVER-12-SP5-2020-2687=1 Package List: - SUSE Linux Enterprise Server 12-SP5 (aarch64 ppc64le s390x x86_64): less-458-7.3.3 less-debuginfo-458-7.3.3 less-debugsource-458-7.3.3

References

#921719

Cross- CVE-2014-9488

Affected Products:

SUSE Linux Enterprise Server 12-SP5

https://www.suse.com/security/cve/CVE-2014-9488.html

https://bugzilla.suse.com/921719

Announcement ID: SUSE-SU-2020:2687-1
Rating: moderate

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here