gpp_maybe
Security update for mgetty
SUSE-SLE-SERVER-12-SP3-2018-2122
This update for mgetty fixes the following security issues: - CVE-2018-16741: The function do_activate() did not properly sanitize shell metacharacters to prevent command injection (bsc#1108752) - CVE-2018-16745: The mail_to parameter was not sanitized, leading to a buffer overflow if long untrusted input reached it (bsc#1108756) - CVE-2018-16744: The mail_to parameter was not sanitized, leading to command injection if untrusted input reached reach it (bsc#1108757) - CVE-2018-16742: Prevent stack-based buffer overflow that could have been triggered via a command-line parameter (bsc#1108762) - CVE-2018-16743: The command-line parameter username wsa passed unsanitized to strcpy(), which could have caused a stack-based buffer overflow (bsc#1108761)
-
Release DateOct 2 2018
-
ReferencesBugzilla: 1108761, 1108757, 1108756, 1108762, 1108752
CVEs: CVE-2018-16744, CVE-2018-16745, CVE-2018-16741, CVE-2018-16742, CVE-2018-16743 -
Typesecurity
-
Severityimportant
cloud_download Downloads
SUSE Linux Enterprise Server 12.3 aarch64
-
Packages
SUSE Linux Enterprise Server for SAP Applications 12.3 ppc64le
-
Packages
SUSE Linux Enterprise Server 12.3 s390x
-
Packages
SUSE Linux Enterprise Server 12.3 x86_64
-
Packages