SUSE-SU-2020:0490-1

Details

This update for ppp fixes the following security issue:

CVE-2020-8597: Fixed a buffer overflow in the eap_request and eap_response functions (bsc#1162610).

Affected Packages

ppp

SUSE Enterprise Storage 5SUSE HPE Helion OpenStack 8SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12 SP2-BCL

Fixed in:

2.4.7-4.3.1

ppp-devel

SUSE Linux Enterprise Software Development Kit 12 SP4SUSE Linux Enterprise Software Development Kit 12 SP5

Fixed in:

2.4.7-4.3.1

References

REPORT

https://bugzilla.suse.com/1162610

WEB

https://www.suse.com/security/cve/CVE-2020-8597

ADVISORY

https://www.suse.com/support/update/announcement/2020/suse-su-20200490-1/