Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2020:1144-1

Опубликовано: 29 апр. 2020
Источник: suse-cvrf

Описание

Security update for munge

This update for munge to 0.5.14 fixes the following issues:

Security issue fixed:

  • CVE-2019-3691: Fixed a local privilege escalation during update (bsc#1155075)

Non-security issue fixed:

  • Add Provides for 'munge-libs' to package libmunge (bsc#1160075).

Список пакетов

SUSE Linux Enterprise Module for HPC 12
libmunge2-0.5.14-3.6.1
munge-0.5.14-3.6.1
munge-devel-0.5.14-3.6.1

Ссылки

Описание

A Symbolic Link (Symlink) Following vulnerability in the packaging of munge in SUSE Linux Enterprise Server 15; openSUSE Factory allowed local attackers to escalate privileges from user munge to root. This issue affects: SUSE Linux Enterprise Server 15 munge versions prior to 0.5.13-4.3.1. openSUSE Factory munge versions prior to 0.5.13-6.1.

Затронутые продукты
SUSE Linux Enterprise Module for HPC 12:libmunge2-0.5.14-3.6.1
SUSE Linux Enterprise Module for HPC 12:munge-0.5.14-3.6.1
SUSE Linux Enterprise Module for HPC 12:munge-devel-0.5.14-3.6.1
Ссылки
Уязвимость SUSE-SU-2020:1144-1