Описание
Security update for powerpc-utils
powerpc-utils was updated to fix one security issue.
This security issue was fixed:
- May expose passwords from fstab or yaboot.con (CVE-2014-4040).
This additional fix was included:
- LPAR crashes when drmgr attempts to offline last remaining cpu core (bnc#901216)
Список пакетов
SUSE Linux Enterprise Server 12
powerpc-utils-1.2.22-7.1
SUSE Linux Enterprise Server for SAP Applications 12
powerpc-utils-1.2.22-7.1
Ссылки
- Link for SUSE-SU-2015:0232-1
- E-Mail link for SUSE-SU-2015:0232-1
- SUSE Security Ratings
- SUSE Bug 883174
- SUSE Bug 901216
- SUSE CVE CVE-2014-4040 page
Описание
snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream.
Затронутые продукты
SUSE Linux Enterprise Server 12:powerpc-utils-1.2.22-7.1
SUSE Linux Enterprise Server for SAP Applications 12:powerpc-utils-1.2.22-7.1
Ссылки
- CVE-2014-4040
- SUSE Bug 883174