SUSE-SU-2019:1000-1

Details

Description of the patch:

This update for ntfs-3g_ntfsprogs fixes the following issues:

Security issues fixed:

CVE-2019-9755: Fixed a heap-based buffer overflow which could lead to local privilege escalation (bsc#1130165).

Affected Packages

libntfs-3g84

SUSE Linux Enterprise Desktop 12 SP3SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Software Development Kit 12 SP3SUSE Linux Enterprise Software Development Kit 12 SP4SUSE Linux Enterprise Workstation Extension 12 SP3

Fixed in:

2013.1.13-5.6.1

ntfs-3g

SUSE Linux Enterprise Desktop 12 SP3SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Workstation Extension 12 SP3SUSE Linux Enterprise Workstation Extension 12 SP4

Fixed in:

2013.1.13-5.6.1

ntfsprogs

SUSE Linux Enterprise Desktop 12 SP3SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Workstation Extension 12 SP3SUSE Linux Enterprise Workstation Extension 12 SP4

Fixed in:

2013.1.13-5.6.1

libntfs-3g-devel

SUSE Linux Enterprise Software Development Kit 12 SP3SUSE Linux Enterprise Software Development Kit 12 SP4

Fixed in:

2013.1.13-5.6.1

References

ADVISORY

https://bugzilla.suse.com/1130165

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2019-April/005359.html

ADVISORY

https://www.suse.com/security/cve/CVE-2019-9755/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2019/suse-su-20191000-1/