Уведомление безопасности SUSE-SU-2019:0127-1

Критичная (7.8)

(AV:N/AC:L/Au:N/C:N/I:N/A:C)

SUSE

libraw9 (any) libraw9-debuginfo (any) libraw-debugsource (any)

Уведомление безопасности об уязвимостях SUSE Linux Enterprise Software Development Kit 12-SP3, SUSE Linux Enterprise Desktop 12-SP4, SUSE Linux Enterprise Desktop 12-SP3, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Workstation Extension 12-SP4, SUSE Linux Enterprise Workstation Extension 12-SP3

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
SUSE Linux Enterprise Software Development Kit 12-SP3:
aarch64, ppc64le, s390x, x86_64:
libraw-devel - 0.15.4-30.1
libraw9-debuginfo - 0.15.4-30.1
libraw-debugsource - 0.15.4-30.1
libraw-devel-static - 0.15.4-30.1
libraw9 - 0.15.4-30.1
SUSE Linux Enterprise Desktop 12-SP4:
x86_64:
libraw9-debuginfo - 0.15.4-30.1
libraw-debugsource - 0.15.4-30.1
libraw9 - 0.15.4-30.1
SUSE Linux Enterprise Software Development Kit 12-SP4:
aarch64, ppc64le, s390x, x86_64:
libraw-devel - 0.15.4-30.1
libraw9-debuginfo - 0.15.4-30.1
libraw-debugsource - 0.15.4-30.1
libraw-devel-static - 0.15.4-30.1
libraw9 - 0.15.4-30.1
SUSE Linux Enterprise Desktop 12-SP3:
x86_64:
libraw9-debuginfo - 0.15.4-30.1
libraw-debugsource - 0.15.4-30.1
libraw9 - 0.15.4-30.1
SUSE Linux Enterprise Workstation Extension 12-SP4:
x86_64:
libraw9-debuginfo - 0.15.4-30.1
libraw-debugsource - 0.15.4-30.1
libraw9 - 0.15.4-30.1
SUSE Linux Enterprise Workstation Extension 12-SP3:
x86_64:
libraw9-debuginfo - 0.15.4-30.1
libraw-debugsource - 0.15.4-30.1
libraw9 - 0.15.4-30.1

http://lists.suse.com/pipermail/sle-security-updates/2019-January/005044.html
https://bugzilla.suse.com/1120498
https://bugzilla.suse.com/1120499
https://bugzilla.suse.com/1120500
https://bugzilla.suse.com/1120515
https://bugzilla.suse.com/1120516
https://bugzilla.suse.com/1120517

Источник: CVE
Наименование: CVE-2018-20364
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20364

Источник: CVE
Наименование: CVE-2018-20365
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20365

Источник: CVE
Наименование: CVE-2018-20363
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20363

Источник: CVE
Наименование: CVE-2018-5817
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5817

Источник: CVE
Наименование: CVE-2018-5818
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5818

Источник: CVE
Наименование: CVE-2018-5819
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5819