shield Security update for netpbm

SUSE-SLE-SERVER-12-SP4-2019-1645

This update for netpbm fixes the following issues: Security issues fixed: - CVE-2018-8975: The pm_mallocarray2 function allowed remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted image file (bsc#1086777). - CVE-2017-2579: Fixed out-of-bounds read in expandCodeOntoStack() (bsc#1024288). - CVE-2017-2580: Fixed out-of-bounds write of heap data in addPixelToRaster() function (bsc#1024291). - create netpbm-vulnerable subpackage and move pstopnm there (bsc#1136936)

• Release Date
  Jun 21 2019
• References
  Bugzilla: 1086777, 1024288, 1024291, 1136936
  CVEs: CVE-2018-8975, CVE-2017-2579, CVE-2017-2580
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 12.4 aarch64

• Packages
  libnetpbm11
  Libraries for the NetPBM (NetPortableBitmap) Graphic Formats

  10.66.3-8.7.2

  lock rpm

  netpbm
  A Powerful Graphics Conversion Package

  10.66.3-8.7.2

  lock rpm

  lock src

SUSE Linux Enterprise Server for SAP Applications 12.4 ppc64le

• Packages
  libnetpbm11
  Libraries for the NetPBM (NetPortableBitmap) Graphic Formats

  10.66.3-8.7.2

  lock rpm

  netpbm
  A Powerful Graphics Conversion Package

  10.66.3-8.7.2

  lock rpm

  lock src

SUSE Linux Enterprise Server 12.4 s390x

• Packages
  libnetpbm11
  Libraries for the NetPBM (NetPortableBitmap) Graphic Formats

  10.66.3-8.7.2

  lock rpm

  libnetpbm11-32bit
  Libraries for the NetPBM (NetPortableBitmap) Graphic Formats

  10.66.3-8.7.2

  lock rpm

  netpbm
  A Powerful Graphics Conversion Package

  10.66.3-8.7.2

  lock rpm

  lock src

SUSE Linux Enterprise Server 12.4 x86_64

• Packages
  libnetpbm11
  Libraries for the NetPBM (NetPortableBitmap) Graphic Formats

  10.66.3-8.7.2

  lock rpm

  libnetpbm11-32bit
  Libraries for the NetPBM (NetPortableBitmap) Graphic Formats

  10.66.3-8.7.2

  lock rpm

  netpbm
  A Powerful Graphics Conversion Package

  10.66.3-8.7.2

  lock rpm

  lock src