openSUSE Security Update: Security update for mgetty ______________________________________________________________________________
Announcement ID: openSUSE-SU-2018:3108-1 Rating: moderate References: #1108752 #1108756 #1108757 #1108761 #1108762
Cross-References: CVE-2018-16741 CVE-2018-16742 CVE-2018-16743 CVE-2018-16744 CVE-2018-16745 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________
An update that fixes 5 vulnerabilities is now available.
Description:
This update for mgetty fixes the following issues:
- CVE-2018-16741: Fixed a command injection in fax/faxq-helper.c (boo#1108752) - CVE-2018-16742: Stack-based buffer overflow in contrib/scrts.c triggered via command line parameter (boo#1108762) - CVE-2018-16743: Stack-based buffer overflow with long username in contrib/next-login/login.c (boo#1108761) - CVE-2018-16744: Command injection in faxrec.c (boo#1108757) - CVE-2018-16745: Stack-based buffer overflow in fax_notify_mail() in faxrec.c (boo#1108756)
- sets maximum length of a string to prevent buffer overflow and thus possible command injection - The obsolete contrib/scrts.c tool was deleted, which contained a buffer overflow.
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Leap 42.3:
zypper in -t patch openSUSE-2018-1144=1
Package List:
- openSUSE Leap 42.3 (i586 x86_64):
g3utils-1.1.36-65.3.1 g3utils-debuginfo-1.1.36-65.3.1 mgetty-1.1.36-65.3.1 mgetty-debuginfo-1.1.36-65.3.1 mgetty-debugsource-1.1.36-65.3.1 sendfax-1.1.36-65.3.1 sendfax-debuginfo-1.1.36-65.3.1
References:
https://www.suse.com/security/cve/CVE-2018-16741.html https://www.suse.com/security/cve/CVE-2018-16742.html https://www.suse.com/security/cve/CVE-2018-16743.html https://www.suse.com/security/cve/CVE-2018-16744.html https://www.suse.com/security/cve/CVE-2018-16745.html https://bugzilla.suse.com/1108752 https://bugzilla.suse.com/1108756 https://bugzilla.suse.com/1108757 https://bugzilla.suse.com/1108761 https://bugzilla.suse.com/1108762