Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2017:2109-1

Опубликовано: 09 авг. 2017
Источник: suse-cvrf

Описание

Security update for tcmu-runner

This update for tcmu-runner fixes the following issues:

  • qcow handler opens up an information leak via the CheckConfig D-Bus method (bsc#1049491)
  • glfs handler allows local DoS via crafted CheckConfig strings (bsc#1049485)
  • UnregisterHandler dbus method in tcmu-runner daemon for non-existing handler causes denial of service (bsc#1049488)
  • UnregisterHandler D-Bus method in tcmu-runner daemon for internal handler causes denial of service (bsc#1049489)
  • Memory leaks can be triggered in tcmu-runner daemon by calling D-Bus method for (Un)RegisterHandler (bsc#1049490)

Список пакетов

SUSE Linux Enterprise Server 12 SP3
libtcmu1-1.2.0-2.3.1
tcmu-runner-1.2.0-2.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
libtcmu1-1.2.0-2.3.1
tcmu-runner-1.2.0-2.3.1
SUSE Linux Enterprise Software Development Kit 12 SP3
tcmu-runner-devel-1.2.0-2.3.1