You are here
Home > Preporuke > Sigurnosni nedostaci programskog paketa file

Sigurnosni nedostaci programskog paketa file

  • Detalji os-a: WN7
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LSU

openSUSE Security Update: Security update for file
______________________________________________________________________________

Announcement ID: openSUSE-SU-2019:1197-1
Rating: moderate
References: #1096974 #1096984 #1126117 #1126118 #1126119

Cross-References: CVE-2018-10360 CVE-2019-8905 CVE-2019-8906
CVE-2019-8907
Affected Products:
openSUSE Leap 42.3
______________________________________________________________________________

An update that solves four vulnerabilities and has one
errata is now available.

Description:

This update for file fixes the following issues:

The following security vulnerabilities were addressed:

– Fixed an out-of-bounds read in the function do_core_note in readelf.c,
which allowed remote attackers to cause a denial of service (application
crash) via a crafted ELF file (bsc#1096974 CVE-2018-10360).
– CVE-2019-8905: Fixed a stack-based buffer over-read in do_core_note in
readelf.c (bsc#1126118)
– CVE-2019-8906: Fixed an out-of-bounds read in do_core_note in readelf. c
(bsc#1126119)
– CVE-2019-8907: Fixed a stack corruption in do_core_note in readelf.c
(bsc#1126117)

This update was imported from the SUSE:SLE-12:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

– openSUSE Leap 42.3:

zypper in -t patch openSUSE-2019-1197=1

Package List:

– openSUSE Leap 42.3 (i586 x86_64):

file-5.22-16.1
file-debuginfo-5.22-16.1
file-debugsource-5.22-16.1
file-devel-5.22-16.1
file-magic-5.22-16.1
libmagic1-5.22-16.1
libmagic1-debuginfo-5.22-16.1
python-magic-5.22-16.1

– openSUSE Leap 42.3 (x86_64):

libmagic1-32bit-5.22-16.1
libmagic1-debuginfo-32bit-5.22-16.1

References:

https://www.suse.com/security/cve/CVE-2018-10360.html
https://www.suse.com/security/cve/CVE-2019-8905.html
https://www.suse.com/security/cve/CVE-2019-8906.html
https://www.suse.com/security/cve/CVE-2019-8907.html
https://bugzilla.suse.com/1096974
https://bugzilla.suse.com/1096984
https://bugzilla.suse.com/1126117
https://bugzilla.suse.com/1126118
https://bugzilla.suse.com/1126119


To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-security-announce+help@opensuse.org

AutorToni Vugdelija
Cert idNCERT-REF-2019-04-0001-ADV
CveCERT-CVE-DUMMY
ID izvornikaCERT-ORIGID-DUMMY
ProizvodCERT-DUMMY-PRODUCT
IzvorAdobe
Top
More in Preporuke
Sigurnosni nedostaci jezgre operacijskog sustava

Otkriveni su sigurnosni nedostaci jezgre operacijskog sustava openSUSE. Otkriveni nedostaci potencijalnim napadačima omogućuju izazivanje DoS stanja, izvršavanje proizvoljnog programskog koda...

Close