gpp_maybe
Security update for mgetty
slessp4-mgetty-13785
This update for mgetty fixes the following issues: - CVE-2018-16741: The function do_activate() did not properly sanitize shell metacharacters to prevent command injection (bsc#1108752) - CVE-2018-16745: The mail_to parameter was not sanitized, leading to a buffer overflow if long untrusted input reached it (bsc#1108756) - CVE-2018-16744: The mail_to parameter was not sanitized, leading to command injection if untrusted input reached reach it (bsc#1108757) - CVE-2018-16742: Prevent stack-based buffer overflow that could have been triggered via a command-line parameter (bsc#1108762) - CVE-2018-16743: The command-line parameter username wsa passed unsanitized to strcpy(), which could have caused a stack-based buffer overflow (bsc#1108761)
-
Release DateSep 25 2018
-
ReferencesBugzilla: 1108761, 1108757, 1108756, 1108762, 1108752
CVEs: CVE-2018-16744, CVE-2018-16745, CVE-2018-16741, CVE-2018-16742, CVE-2018-16743 -
Typesecurity
-
Severityimportant
cloud_download Downloads
SUSE Linux Enterprise Server 11.4 i586
-
Packages
SUSE Linux Enterprise Server 11.4 ia64
-
Packages
SUSE Linux Enterprise Server for SAP Applications 11.4 ppc64
-
Packages
SUSE Linux Enterprise Server 11.4 s390x
-
Packages
SUSE Linux Enterprise Server for SAP All-in-One 11.4 x86_64
-
Packages