SUSE-SU-2018:1601-1

Details

Description of the patch:

This update fixes the following issues:

CVE-2016-8705: Server update remote code execution (bsc#1007870).
CVE-2017-9951: Heap-based buffer over-read in try_read_command function (incomplete fix for CVE-2016-8705) (bsc#1056865).

Affected Packages

memcached

SUSE Linux Enterprise Desktop 11 SP4SUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server for SAP Applications 11 SP4SUSE Linux Enterprise Software Development Kit 11 SP4SUSE Studio Onsite 1.3

Fixed in:

1.2.6-5.17.4.1

References

ADVISORY

https://bugzilla.suse.com/1007870

ADVISORY

https://bugzilla.suse.com/1056865

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2018-June/004166.html

ADVISORY

https://www.suse.com/security/cve/CVE-2016-8705/

ADVISORY

https://www.suse.com/security/cve/CVE-2017-9951/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2018/suse-su-20181601-1/