gpp_maybe Security update for mgetty

SUSE-SLE-Module-Basesystem-15-2018-2054

This update for mgetty fixes the following issues: - CVE-2018-16741: The function do_activate() did not properly sanitize shell metacharacters to prevent command injection (bsc#1108752). - CVE-2018-16745: The mail_to parameter was not sanitized, leading to a buffer overflow if long untrusted input reached it (bsc#1108756). - CVE-2018-16744: The mail_to parameter was not sanitized, leading to command injection if untrusted input reached reach it (bsc#1108757). - CVE-2018-16742: Prevent stack-based buffer overflow that could have been triggered via a command-line parameter (bsc#1108762). - CVE-2018-16743: The command-line parameter username wsa passed unsanitized to strcpy(), which could have caused a stack-based buffer overflow (bsc#1108761).

• Release Date
  Sep 27 2018
• References
  Bugzilla: 1108762, 1108752, 1108761, 1108757, 1108756
  CVEs: CVE-2018-16744, CVE-2018-16745, CVE-2018-16741, CVE-2018-16742, CVE-2018-16743
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15 ppc64le

• Packages
  g3utils
  Tools for the G3 (Fax) Graphics Format

  1.1.37-3.3.2 lock rpm

  mgetty
  Mgetty Listens for Data, Fax, or Voice Calls on a Serial Line

  1.1.37-3.3.2 lock rpm lock src

Basesystem Module 15 s390x

• Packages
  g3utils
  Tools for the G3 (Fax) Graphics Format

  1.1.37-3.3.2 lock rpm

  mgetty
  Mgetty Listens for Data, Fax, or Voice Calls on a Serial Line

  1.1.37-3.3.2 lock rpm lock src

Basesystem Module 15 aarch64

• Packages
  g3utils
  Tools for the G3 (Fax) Graphics Format

  1.1.37-3.3.2 lock rpm

  mgetty
  Mgetty Listens for Data, Fax, or Voice Calls on a Serial Line

  1.1.37-3.3.2 lock rpm lock src

Basesystem Module 15 x86_64

• Packages
  g3utils
  Tools for the G3 (Fax) Graphics Format

  1.1.37-3.3.2 lock rpm

  mgetty
  Mgetty Listens for Data, Fax, or Voice Calls on a Serial Line

  1.1.37-3.3.2 lock rpm lock src