SUSE-SU-2019:2737-1

UNKNOWN

Security update for openconnect

Published Oct 22, 2019

Modified 6 years ago

Fix available

Details

This update for openconnect fixes the following issues:

CVE-2019-16239: Fixed a buffer overflow when a malicious server uses HTTP chunked encoding with crafted chunk sizes. (bsc#1151178)

Affected Packages

openconnect

SUSE Linux Enterprise Workstation Extension 15SUSE Linux Enterprise Workstation Extension 15 SP1

Fixed in:

7.08-6.3.1

openconnect-devel

SUSE Linux Enterprise Workstation Extension 15SUSE Linux Enterprise Workstation Extension 15 SP1

Fixed in:

7.08-6.3.1

openconnect-lang

SUSE Linux Enterprise Workstation Extension 15SUSE Linux Enterprise Workstation Extension 15 SP1

Fixed in:

7.08-6.3.1

References

Upstream

Ecosystems

Timeline

PublishedOct 22, 2019

ModifiedOct 22, 2019

SUSE-SU-2019:2737-1 | Mondoo Vulnerability Intelligence