SUSE-SU-2018:0858-1

UNKNOWN

Security update for graphite2

Published Apr 3, 2018

Modified 7 years ago

Fix available

Details

This update for graphite2 fixes the following issues:

CVE-2018-7999: Fixed a NULL pointer dereference vulnerability in Segment.cpp that may cause a denial of serivce (bsc#1084850).

Affected Packages

graphite2

SUSE Linux Enterprise Desktop 12 SP2SUSE Linux Enterprise Desktop 12 SP3SUSE Linux Enterprise Server 12 SP2SUSE Linux Enterprise Server 12 SP3SUSE Linux Enterprise Server for Raspberry Pi 12 SP2

Fixed in:

1.3.1-10.3.1

libgraphite2-3

SUSE Linux Enterprise Desktop 12 SP2SUSE Linux Enterprise Desktop 12 SP3SUSE Linux Enterprise Server 12 SP2SUSE Linux Enterprise Server 12 SP3SUSE Linux Enterprise Server for Raspberry Pi 12 SP2

Fixed in:

1.3.1-10.3.1

libgraphite2-3-32bit

SUSE Linux Enterprise Desktop 12 SP2SUSE Linux Enterprise Desktop 12 SP3SUSE Linux Enterprise Server 12 SP2SUSE Linux Enterprise Server 12 SP3SUSE Linux Enterprise Server for SAP Applications 12 SP2

Fixed in:

1.3.1-10.3.1

graphite2-devel

SUSE Linux Enterprise Software Development Kit 12 SP2SUSE Linux Enterprise Software Development Kit 12 SP3

Fixed in:

1.3.1-10.3.1

References

REPORT

https://bugzilla.suse.com/1084850

WEB

https://www.suse.com/security/cve/CVE-2018-7999

ADVISORY