SUSE-SU-2024:0434-1: Security update for netpbm
This update for netpbm fixes the following issues: CVE-2017-5849: Fixed out-of-bound read and write issue that can occur in function putgreytile() and put1bitbwtile() (bsc#1022790, bsc#1022791).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/libnetpbm11-debuginfoto a version that resolves this vulnerability.Fixed in 10.66.3-8.10.1 - Upgrade
Upgrade
suse/netpbm-debuginfoto a version that resolves this vulnerability.Fixed in 10.66.3-8.10.1 - Upgrade
Upgrade
suse/netpbmto a version that resolves this vulnerability.Fixed in 10.66.3-8.10.1 - Upgrade
Upgrade
suse/libnetpbm11to a version that resolves this vulnerability.Fixed in 10.66.3-8.10.1 - Upgrade
Upgrade
suse/netpbm-debugsourceto a version that resolves this vulnerability.Fixed in 10.66.3-8.10.1 - Upgrade
Upgrade
suse/libnetpbm11to a version that resolves this vulnerability.Fixed in 32bit-10.66.3-8.10.1 - Upgrade
Upgrade
suse/libnetpbm11-debuginfoto a version that resolves this vulnerability.Fixed in 32bit-10.66.3-8.10.1 - Upgrade
Upgrade
suse/libnetpbm-develto a version that resolves this vulnerability.Fixed in 10.66.3-8.10.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-SDK-12-SP5-2024-434=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-SERVER-12-SP5-2024-434=1
Event History
Frequently Asked Questions
Which systems and packages are covered by this update?
The update applies to SUSE Linux Enterprise Server 12 SP5 on aarch64, ppc64le, s390x, and x86_64, and to SUSE Linux Enterprise High Performance Computing 12 SP5 on aarch64 and x86_64. Covered packages include netpbm, libnetpbm11, and their debug and debuginfo packages.
How can I determine whether a system needs this update?
Check whether a listed SUSE 12 SP5 system has netpbm or libnetpbm11 installed, including associated debug packages. Systems matching those products and architectures should be evaluated for installation of SUSE-SU-2024:0434-1.