8886 moderate openSUSE Leap 42.3 Update This update for mgetty fixes the following issues: - CVE-2018-16741: Fixed a command injection in fax/faxq-helper.c (boo#1108752) - CVE-2018-16742: Stack-based buffer overflow in contrib/scrts.c triggered via command line parameter (boo#1108762) - CVE-2018-16743: Stack-based buffer overflow with long username in contrib/next-login/login.c (boo#1108761) - CVE-2018-16744: Command injection in faxrec.c (boo#1108757) - CVE-2018-16745: Stack-based buffer overflow in fax_notify_mail() in faxrec.c (boo#1108756) - sets maximum length of a string to prevent buffer overflow and thus possible command injection - The obsolete contrib/scrts.c tool was deleted, which contained a buffer overflow. g3utils-1.1.36-65.3.1.i586.rpm g3utils-debuginfo-1.1.36-65.3.1.i586.rpm mgetty-1.1.36-65.3.1.i586.rpm mgetty-1.1.36-65.3.1.src.rpm mgetty-debuginfo-1.1.36-65.3.1.i586.rpm mgetty-debugsource-1.1.36-65.3.1.i586.rpm sendfax-1.1.36-65.3.1.i586.rpm sendfax-debuginfo-1.1.36-65.3.1.i586.rpm g3utils-1.1.36-65.3.1.x86_64.rpm g3utils-debuginfo-1.1.36-65.3.1.x86_64.rpm mgetty-1.1.36-65.3.1.x86_64.rpm mgetty-debuginfo-1.1.36-65.3.1.x86_64.rpm mgetty-debugsource-1.1.36-65.3.1.x86_64.rpm sendfax-1.1.36-65.3.1.x86_64.rpm sendfax-debuginfo-1.1.36-65.3.1.x86_64.rpm