openSUSE Security Update: Security update for lout
______________________________________________________________________________
Announcement ID: openSUSE-SU-2020:1813-1
Rating: important
References: #1159713 #1159714
Cross-References: CVE-2019-19917 CVE-2019-19918
Affected Products:
openSUSE Backports SLE-15-SP2
______________________________________________________________________________
An update that fixes two vulnerabilities is now available.
Description:
This update for lout fixes the following issues:
– CVE-2019-19918: Fixed buffer overflow in srcnext() (boo#1159713).
– CVE-2019-19917: Fixed buffer overflow in StringQuotedWord()
(boo#1159714).
This update was imported from the openSUSE:Leap:15.2:Update update project.
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.
Alternatively you can run the command listed for your product:
– openSUSE Backports SLE-15-SP2:
zypper in -t patch openSUSE-2020-1813=1
Package List:
– openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64):
lout-3.40-bp152.4.3.1
References:
https://protect2.fireeye.com/v1/url?k=9a174138-c58b5b26-9a10dcf4-000babd90757-46196f7b4bfff0ad&q=1&e=cc5ec599-3e9f-45d4-b097-c7424cdb432e&u=https%3A%2F%2Fwww.suse.com%2Fsecurity%2Fcve%2FCVE-2019-19917.html
https://protect2.fireeye.com/v1/url?k=b050b335-efcca92b-b0572ef9-000babd90757-0da707f023ceacb6&q=1&e=cc5ec599-3e9f-45d4-b097-c7424cdb432e&u=https%3A%2F%2Fwww.suse.com%2Fsecurity%2Fcve%2FCVE-2019-19918.html
https://protect2.fireeye.com/v1/url?k=cdd6c8db-924ad2c5-cdd15517-000babd90757-1c5598cf65c8bd26&q=1&e=cc5ec599-3e9f-45d4-b097-c7424cdb432e&u=https%3A%2F%2Fbugzilla.suse.com%2F1159713
https://protect2.fireeye.com/v1/url?k=c8520212-97ce180c-c8559fde-000babd90757-30d60b0228c84f70&q=1&e=cc5ec599-3e9f-45d4-b097-c7424cdb432e&u=https%3A%2F%2Fbugzilla.suse.com%2F1159714
—
To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-security-announce+help@opensuse.org
openSUSE Security Update: Security update for lout
______________________________________________________________________________
Announcement ID: openSUSE-SU-2020:1812-1
Rating: important
References: #1159713 #1159714
Cross-References: CVE-2019-19917 CVE-2019-19918
Affected Products:
openSUSE Backports SLE-15-SP1
______________________________________________________________________________
An update that fixes two vulnerabilities is now available.
Description:
This update for lout fixes the following issues:
– CVE-2019-19918: Fixed buffer overflow in srcnext() (boo#1159713).
– CVE-2019-19917: Fixed buffer overflow in StringQuotedWord()
(boo#1159714).
This update was imported from the openSUSE:Leap:15.1:Update update project.
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.
Alternatively you can run the command listed for your product:
– openSUSE Backports SLE-15-SP1:
zypper in -t patch openSUSE-2020-1812=1
Package List:
– openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64):
lout-3.40-bp151.2.3.1
References:
https://protect2.fireeye.com/v1/url?k=c0ecfbd7-9f70e1c9-c0eb661b-000babd90757-5a445d06c2b8c279&q=1&e=be880040-a132-461b-8091-492a0582f7b2&u=https%3A%2F%2Fwww.suse.com%2Fsecurity%2Fcve%2FCVE-2019-19917.html
https://protect2.fireeye.com/v1/url?k=210ebee9-7e92a4f7-21092325-000babd90757-1b03a8e050e07698&q=1&e=be880040-a132-461b-8091-492a0582f7b2&u=https%3A%2F%2Fwww.suse.com%2Fsecurity%2Fcve%2FCVE-2019-19918.html
https://protect2.fireeye.com/v1/url?k=956d880a-caf19214-956a15c6-000babd90757-12730ce2e92271bc&q=1&e=be880040-a132-461b-8091-492a0582f7b2&u=https%3A%2F%2Fbugzilla.suse.com%2F1159713
https://protect2.fireeye.com/v1/url?k=96a3cf56-c93fd548-96a4529a-000babd90757-95e8c834741b43ac&q=1&e=be880040-a132-461b-8091-492a0582f7b2&u=https%3A%2F%2Fbugzilla.suse.com%2F1159714
—
To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-security-announce+help@opensuse.org
