SUSE-SU-2016:1091-1

HIGH7.8

Security update for lhasa

Published Apr 18, 2016

Modified 10 years ago

Fix available

Details

Description of the patch:

lhasa was updated to fix one security issue.

This security issue was fixed:

CVE-2016-2347: decode_level3_header heap corruption vulnerability (bsc#973790).

Affected Packages

lhasa

SUSE Linux Enterprise Desktop 12SUSE Linux Enterprise Desktop 12 SP1SUSE Linux Enterprise Workstation Extension 12SUSE Linux Enterprise Workstation Extension 12 SP1

Fixed in:

0.2.0-5.1

liblhasa0

SUSE Linux Enterprise Desktop 12SUSE Linux Enterprise Desktop 12 SP1SUSE Linux Enterprise Server 12SUSE Linux Enterprise Server 12 SP1SUSE Linux Enterprise Server for SAP Applications 12

Fixed in:

0.2.0-5.1

lhasa-devel

SUSE Linux Enterprise Server 12SUSE Linux Enterprise Server 12 SP1SUSE Linux Enterprise Server for SAP Applications 12SUSE Linux Enterprise Server for SAP Applications 12 SP1SUSE Linux Enterprise Software Development Kit 12

Fixed in:

0.2.0-5.1

References

ADVISORY

https://bugzilla.suse.com/973790

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2016-April/002019.html

ADVISORY

https://www.suse.com/security/cve/CVE-2016-2347/

WEB

https://www.suse.com/support/security/rating/

ADVISORY