Описание
Security update for xdg-utils
This update of xdg-utils fixes a command injection security problem (CVE-2014-9622, bsc#913676) and a bug when opening files where multiple mime handlers existed (bsc#906625).
Список пакетов
SUSE Linux Enterprise Desktop 12
xdg-utils-20140630-5.1
SUSE Linux Enterprise Server 12
xdg-utils-20140630-5.1
SUSE Linux Enterprise Server for SAP Applications 12
xdg-utils-20140630-5.1
Ссылки
- Link for SUSE-SU-2015:0271-1
- E-Mail link for SUSE-SU-2015:0271-1
- SUSE Security Ratings
- SUSE Bug 906625
- SUSE Bug 913676
- SUSE CVE CVE-2014-9622 page
Описание
Eval injection vulnerability in xdg-utils 1.1.0 RC1, when no supported desktop environment is identified, allows context-dependent attackers to execute arbitrary code via the URL argument to xdg-open.
Затронутые продукты
SUSE Linux Enterprise Desktop 12:xdg-utils-20140630-5.1
SUSE Linux Enterprise Server 12:xdg-utils-20140630-5.1
SUSE Linux Enterprise Server for SAP Applications 12:xdg-utils-20140630-5.1
Ссылки
- CVE-2014-9622
- SUSE Bug 913676