{"affected":[{"ecosystem_specific":{"binaries":[{"libatalk12":"3.1.0-3.3.1","netatalk":"3.1.0-3.3.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","name":"netatalk","purl":"pkg:rpm/suse/netatalk&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"3.1.0-3.3.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libatalk12":"3.1.0-3.3.1","netatalk":"3.1.0-3.3.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","name":"netatalk","purl":"pkg:rpm/suse/netatalk&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"3.1.0-3.3.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libatalk12":"3.1.0-3.3.1","netatalk":"3.1.0-3.3.1","netatalk-devel":"3.1.0-3.3.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","name":"netatalk","purl":"pkg:rpm/suse/netatalk&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"3.1.0-3.3.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libatalk12":"3.1.0-3.3.1","netatalk":"3.1.0-3.3.1","netatalk-devel":"3.1.0-3.3.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","name":"netatalk","purl":"pkg:rpm/suse/netatalk&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"3.1.0-3.3.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libatalk12":"3.1.0-3.3.1","netatalk":"3.1.0-3.3.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","name":"netatalk","purl":"pkg:rpm/suse/netatalk&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"3.1.0-3.3.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libatalk12":"3.1.0-3.3.1","netatalk":"3.1.0-3.3.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP4","name":"netatalk","purl":"pkg:rpm/suse/netatalk&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"3.1.0-3.3.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for netatalk fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-1160 Fixed a missing bounds check in the handling of the DSI\n  OPEN SESSION request, which allowed an unauthenticated to overwrite memory\n  with data of their choice leading to arbitrary code execution with root\n  privileges. (bsc#1119540)\n","id":"SUSE-SU-2018:4217-1","modified":"2018-12-21T13:42:04Z","published":"2018-12-21T13:42:04Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2018/suse-su-20184217-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1119540"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-1160"}],"related":["CVE-2018-1160"],"summary":"Security update for netatalk","upstream":["CVE-2018-1160"]}