Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2017:2422-1

Опубликовано: 12 сент. 2017
Источник: suse-cvrf

Описание

Security update for cvs

This update for cvs fixes the following issues:

  • CVE-2017-12836: A leading dash in the argument of the '-d' option could lead to argument injection (bsc#1053364)

Список пакетов

SUSE Linux Enterprise Server 11 SP4
cvs-1.12.12-144.23.5.3.1
cvs-doc-1.12.12-144.23.5.3.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4
cvs-1.12.12-144.23.5.3.1
cvs-doc-1.12.12-144.23.5.3.1
SUSE Linux Enterprise Software Development Kit 11 SP4
cvs-doc-1.12.12-144.23.5.3.1

Ссылки

Описание

CVS 1.12.x, when configured to use SSH for remote repositories, might allow remote attackers to execute arbitrary code via a repository URL with a crafted hostname, as demonstrated by "-oProxyCommand=id;localhost:/bar."

Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:cvs-1.12.12-144.23.5.3.1
SUSE Linux Enterprise Server 11 SP4:cvs-doc-1.12.12-144.23.5.3.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4:cvs-1.12.12-144.23.5.3.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4:cvs-doc-1.12.12-144.23.5.3.1
Ссылки