Fixed packages 16
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 7 enterprise_linux:7::client | openslp | 1:2.0.0-7.el7_5 |
| Red Hat · RHEL 7 enterprise_linux:7::client | openslp-debuginfo | 1:2.0.0-7.el7_5 |
| Red Hat · RHEL 7 enterprise_linux:7::client | openslp-devel | 1:2.0.0-7.el7_5 |
| Red Hat · RHEL 7 enterprise_linux:7::client | openslp-server | 1:2.0.0-7.el7_5 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | openslp | 1:2.0.0-7.el7_5 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | openslp-debuginfo | 1:2.0.0-7.el7_5 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | openslp-devel | 1:2.0.0-7.el7_5 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | openslp-server | 1:2.0.0-7.el7_5 |
| Red Hat · RHEL 7 enterprise_linux:7::server | openslp | 1:2.0.0-7.el7_5 |
| Red Hat · RHEL 7 enterprise_linux:7::server | openslp-debuginfo | 1:2.0.0-7.el7_5 |
| Red Hat · RHEL 7 enterprise_linux:7::server | openslp-devel | 1:2.0.0-7.el7_5 |
| Red Hat · RHEL 7 enterprise_linux:7::server | openslp-server | 1:2.0.0-7.el7_5 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | openslp | 1:2.0.0-7.el7_5 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | openslp-debuginfo | 1:2.0.0-7.el7_5 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | openslp-devel | 1:2.0.0-7.el7_5 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | openslp-server | 1:2.0.0-7.el7_5 |
Vulnerabilities 1
-
Unscored —
OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest its…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://access.redhat.com/security/cve/CVE-2017-17833
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1572166
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2240.json
-
advisory
https://www.cve.org/CVERecord?id=CVE-2017-17833
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-17833
-
article
https://dumpco.re/blog/openslp-2.0.0-double-free