Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:0866-1

Опубликовано: 03 апр. 2018
Источник: suse-cvrf

Описание

Security update for coreutils

This update for coreutils fixes one issue.

This security issue was fixed:

  • CVE-2017-2616: In su with PAM support it was possible for local users to send SIGKILL to selected other processes with root privileges (bsc#1023041)

Список пакетов

SUSE Linux Enterprise Server 11 SP4
coreutils-8.12-6.25.33.3.1
coreutils-lang-8.12-6.25.33.3.1
coreutils-x86-8.12-6.25.33.3.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4
coreutils-8.12-6.25.33.3.1
coreutils-lang-8.12-6.25.33.3.1
coreutils-x86-8.12-6.25.33.3.1

Ссылки

Описание

A race condition was found in util-linux before 2.32.1 in the way su handled the management of child processes. A local authenticated attacker could use this flaw to kill other processes with root privileges under specific conditions.

Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:coreutils-8.12-6.25.33.3.1
SUSE Linux Enterprise Server 11 SP4:coreutils-lang-8.12-6.25.33.3.1
SUSE Linux Enterprise Server 11 SP4:coreutils-x86-8.12-6.25.33.3.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4:coreutils-8.12-6.25.33.3.1
Ссылки