< back to search

gpp_maybe Security update for atftp

SUSE-SLE-SERVER-12-2019-1091

This update for atftp fixes the following issues: Security issues fixed: - CVE-2019-11366: Fixed a denial of service caused by a NULL pointer dereference because thread_list_mutex was not locked (bsc#1133145). - CVE-2019-11365: Fixed a buffer overflow which could lead to remote code execution caused by an insecure use of strncpy() (bsc#1133114).

Release Date

Apr 29 2019
References

Bugzilla: 1133114, 1133145
CVEs: CVE-2019-11366, CVE-2019-11365
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Server LTSS 12 s390x

Packages

atftp
Advanced TFTP Server and Client

0.7.0-160.8.1 lock rpm lock src

SUSE Linux Enterprise Server LTSS 12 x86_64

Packages

atftp
Advanced TFTP Server and Client

0.7.0-160.8.1 lock rpm lock src