Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2017:1335-1

Опубликовано: 18 мая 2017
Источник: suse-cvrf

Описание

Security update for kdelibs4

This update for kdelibs4 fixes the following issues:

  • CVE-2017-8422: This update fixes problem in the DBUS authentication of the kauth framework that could be used to escalate privileges depending on bugs or misimplemented dbus services. (boo#1036244)

Список пакетов

SUSE Linux Enterprise Desktop 12 SP1
libkde4-4.12.0-10.1
libkde4-32bit-4.12.0-10.1
libkdecore4-4.12.0-10.1
libkdecore4-32bit-4.12.0-10.1
libksuseinstall1-4.12.0-10.1
libksuseinstall1-32bit-4.12.0-10.1
SUSE Linux Enterprise Desktop 12 SP2
libkde4-4.12.0-10.1
libkde4-32bit-4.12.0-10.1
libkdecore4-4.12.0-10.1
libkdecore4-32bit-4.12.0-10.1
libksuseinstall1-4.12.0-10.1
libksuseinstall1-32bit-4.12.0-10.1
SUSE Linux Enterprise Server 12 SP1
libkde4-4.12.0-10.1
libkde4-32bit-4.12.0-10.1
libkdecore4-4.12.0-10.1
libkdecore4-32bit-4.12.0-10.1
libksuseinstall1-4.12.0-10.1
libksuseinstall1-32bit-4.12.0-10.1
SUSE Linux Enterprise Server 12 SP2
libkde4-4.12.0-10.1
libkde4-32bit-4.12.0-10.1
libkdecore4-4.12.0-10.1
libkdecore4-32bit-4.12.0-10.1
libksuseinstall1-4.12.0-10.1
libksuseinstall1-32bit-4.12.0-10.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
libkde4-4.12.0-10.1
libkdecore4-4.12.0-10.1
libksuseinstall1-4.12.0-10.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1
libkde4-4.12.0-10.1
libkde4-32bit-4.12.0-10.1
libkdecore4-4.12.0-10.1
libkdecore4-32bit-4.12.0-10.1
libksuseinstall1-4.12.0-10.1
libksuseinstall1-32bit-4.12.0-10.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2
libkde4-4.12.0-10.1
libkde4-32bit-4.12.0-10.1
libkdecore4-4.12.0-10.1
libkdecore4-32bit-4.12.0-10.1
libksuseinstall1-4.12.0-10.1
libksuseinstall1-32bit-4.12.0-10.1

Описание

KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app.


Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP1:libkde4-32bit-4.12.0-10.1
SUSE Linux Enterprise Desktop 12 SP1:libkde4-4.12.0-10.1
SUSE Linux Enterprise Desktop 12 SP1:libkdecore4-32bit-4.12.0-10.1
SUSE Linux Enterprise Desktop 12 SP1:libkdecore4-4.12.0-10.1

Ссылки