Bug 977989 (CVE-2016-4354) - VUL-0: CVE-2016-4354: libksba: incorrect integer data type
Summary: VUL-0: CVE-2016-4354: libksba: incorrect integer data type
Status: RESOLVED INVALID
Alias: CVE-2016-4354
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P2 - High : Normal
Target Milestone: ---
Deadline: 2016-05-17
Assignee: Forgotten User l5HDYKT_qR
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/168464/
Whiteboard: CVSSv2:RedHat:CVE-2016-4355:5.1:(AV:N...
Keywords:
Depends on:
Blocks:
 
Reported: 2016-05-02 08:10 UTC by Sebastian Krahmer
Modified: 2016-05-04 14:23 UTC (History)
2 users (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Comment 1 Swamp Workflow Management 2016-05-03 11:39:02 UTC 
An update workflow for this issue was started.
This issue was rated as moderate.
Please submit fixed packages until 2016-05-17.
When done, reassign the bug to security-team@suse.de.
https://swamp.suse.de/webswamp/wf/62684
Comment 2 Forgotten User l5HDYKT_qR 2016-05-04 12:22:51 UTC 
This issue seems to already have been fixed by 0002-Fix-integer-overflow-in-the-BER-decoder.patch present in all SUSE_SLE-10-SP3, SUSE_SLE-11, SUSE_SLE-12, openSUSE:13.2, openSUSE:Leap:42.1.