Early Access — Mondoo Vulnerability Intelligence is currently in preview.

SUSE-SU-2021:2937-1

UNKNOWN

Security update for libesmtp

Published Sep 3, 2021

Modified 4 years ago

Fix available

Details

This update for libesmtp fixes the following issues:

CVE-2019-19977: Fixed stack-based buffer over-read in ntlm/ntlmstruct.c (bsc#1160462).

Affected Packages

SUSE:Enterprise Storage 6libesmtp

Fixed in:

1.0.6-150.4.1

SUSE:Enterprise Storage 6libesmtp-devel

Fixed in:

1.0.6-150.4.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOSlibesmtp

Fixed in:

1.0.6-150.4.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOSlibesmtp-devel

Fixed in:

1.0.6-150.4.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSSlibesmtp

Fixed in:

1.0.6-150.4.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSSlibesmtp-devel

Fixed in:

1.0.6-150.4.1

SUSE:Linux Enterprise High Performance Computing 15-ESPOSlibesmtp

Fixed in:

1.0.6-150.4.1

SUSE:Linux Enterprise High Performance Computing 15-ESPOSlibesmtp-devel

Fixed in:

1.0.6-150.4.1

SUSE:Linux Enterprise High Performance Computing 15-LTSSlibesmtp

Fixed in:

1.0.6-150.4.1

SUSE:Linux Enterprise High Performance Computing 15-LTSSlibesmtp-devel

Fixed in:

1.0.6-150.4.1

SUSE:Linux Enterprise Micro 5.0libesmtp

Fixed in:

1.0.6-150.4.1

SUSE:Linux Enterprise Module for Basesystem 15 SP2libesmtp

Fixed in:

1.0.6-150.4.1

SUSE:Linux Enterprise Module for Basesystem 15 SP2libesmtp-devel

Fixed in:

1.0.6-150.4.1

SUSE:Linux Enterprise Module for Basesystem 15 SP3libesmtp

Fixed in:

1.0.6-150.4.1

SUSE:Linux Enterprise Module for Basesystem 15 SP3libesmtp-devel

Fixed in:

1.0.6-150.4.1

SUSE:Linux Enterprise Server 15 SP1-BCLlibesmtp

Fixed in:

1.0.6-150.4.1

SUSE:Linux Enterprise Server 15 SP1-BCLlibesmtp-devel

Fixed in:

1.0.6-150.4.1

SUSE:Linux Enterprise Server 15 SP1-LTSSlibesmtp

Fixed in:

1.0.6-150.4.1

SUSE:Linux Enterprise Server 15 SP1-LTSSlibesmtp-devel

Fixed in:

1.0.6-150.4.1

SUSE:Linux Enterprise Server 15-LTSSlibesmtp

Fixed in:

1.0.6-150.4.1

SUSE:Linux Enterprise Server 15-LTSSlibesmtp-devel

Fixed in:

1.0.6-150.4.1

SUSE:Linux Enterprise Server for SAP Applications 15libesmtp

Fixed in:

1.0.6-150.4.1

SUSE:Linux Enterprise Server for SAP Applications 15libesmtp-devel

Fixed in:

1.0.6-150.4.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP1libesmtp

Fixed in:

1.0.6-150.4.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP1libesmtp-devel

Fixed in:

1.0.6-150.4.1

SUSE:Manager Proxy 4.0libesmtp

Fixed in:

1.0.6-150.4.1

SUSE:Manager Proxy 4.0libesmtp-devel

Fixed in:

1.0.6-150.4.1

SUSE:Manager Retail Branch Server 4.0libesmtp

Fixed in:

1.0.6-150.4.1

SUSE:Manager Retail Branch Server 4.0libesmtp-devel

Fixed in:

1.0.6-150.4.1

SUSE:Manager Server 4.0libesmtp

Fixed in:

1.0.6-150.4.1

SUSE:Manager Server 4.0libesmtp-devel

Fixed in:

1.0.6-150.4.1

References

REPORThttps://bugzilla.suse.com/1160462 REPORThttps://bugzilla.suse.com/1189097 WEBhttps://www.suse.com/security/cve/CVE-2019-19977 ADVISORYhttps://www.suse.com/support/update/announcement/2021/suse-su-20212937-1/

Upstream

CVE-2019-19977

Ecosystems

Timeline

PublishedSep 3, 2021

ModifiedSep 3, 2021

SUSE-SU-2021:2937-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2021:2937-1

Details

Affected Packages

References

Upstream

Related

Ecosystems

Timeline