SUSE-SU-2019:2669-1

Details

Description of the patch:

This update for libpcap fixes the following issues:

CVE-2019-15165: Added sanity checks for PHB header length before allocating memory (bsc#1153332).
CVE-2018-16301: Fixed a buffer overflow (bsc#1153332).

Affected Packages

libpcap1

SUSE Enterprise Storage 4SUSE Enterprise Storage 5SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP1SUSE Linux Enterprise Server 12 SP1-LTSS

Fixed in:

1.8.1-10.3.1

tcpdump

SUSE Enterprise Storage 4SUSE Enterprise Storage 5SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP1SUSE Linux Enterprise Server 12 SP1-LTSS

Fixed in:

4.9.2-14.14.1

libpcap1-32bit

SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Workstation Extension 12 SP4SUSE Linux Enterprise Workstation Extension 12 SP5

Fixed in:

1.8.1-10.3.1

libpcap-devel

SUSE Linux Enterprise Server 12 SP4SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5SUSE Linux Enterprise Software Development Kit 12 SP4

Fixed in:

1.8.1-10.3.1

References

ADVISORY

https://bugzilla.suse.com/1153332

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2019-October/006016.html

ADVISORY

https://www.suse.com/security/cve/CVE-2018-16301/

ADVISORY

https://www.suse.com/security/cve/CVE-2019-15165/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2019/suse-su-20192669-1/