Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2022:3899-1

Опубликовано: 08 нояб. 2022
Источник: suse-cvrf

Описание

Security update for sendmail

This update for sendmail fixes the following issues:

  • CVE-2022-31256: Fixed mail to root privilege escalation via sm-client.pre script (bsc#1204696, bsc#1202937).

Список пакетов

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production
libmilter1_0-8.15.2-150000.8.9.1
Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production
libmilter1_0-8.15.2-150000.8.9.1
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production
libmilter1_0-8.15.2-150000.8.9.1
Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production
libmilter1_0-8.15.2-150000.8.9.1
SUSE Enterprise Storage 6
libmilter1_0-8.15.2-150000.8.9.1
SUSE Enterprise Storage 7
libmilter1_0-8.15.2-150000.8.9.1
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS
libmilter1_0-8.15.2-150000.8.9.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS
libmilter1_0-8.15.2-150000.8.9.1
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS
libmilter1_0-8.15.2-150000.8.9.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS
libmilter1_0-8.15.2-150000.8.9.1
SUSE Linux Enterprise High Performance Computing 15-ESPOS
libmilter1_0-8.15.2-150000.8.9.1
SUSE Linux Enterprise High Performance Computing 15-LTSS
libmilter1_0-8.15.2-150000.8.9.1
SUSE Linux Enterprise Module for Basesystem 15 SP3
libmilter1_0-8.15.2-150000.8.9.1
SUSE Linux Enterprise Module for Basesystem 15 SP4
libmilter1_0-8.15.2-150000.8.9.1
SUSE Linux Enterprise Module for Package Hub 15 SP3
rmail-8.15.2-150000.8.9.1
SUSE Linux Enterprise Module for Package Hub 15 SP4
rmail-8.15.2-150000.8.9.1
SUSE Linux Enterprise Server 15 SP1-BCL
libmilter1_0-8.15.2-150000.8.9.1
SUSE Linux Enterprise Server 15 SP1-LTSS
libmilter1_0-8.15.2-150000.8.9.1
SUSE Linux Enterprise Server 15 SP2-BCL
libmilter1_0-8.15.2-150000.8.9.1
SUSE Linux Enterprise Server 15 SP2-LTSS
libmilter1_0-8.15.2-150000.8.9.1
SUSE Linux Enterprise Server 15-LTSS
libmilter1_0-8.15.2-150000.8.9.1
SUSE Linux Enterprise Server for SAP Applications 15
libmilter1_0-8.15.2-150000.8.9.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1
libmilter1_0-8.15.2-150000.8.9.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2
libmilter1_0-8.15.2-150000.8.9.1
SUSE Manager Proxy 4.1
libmilter1_0-8.15.2-150000.8.9.1
SUSE Manager Retail Branch Server 4.1
libmilter1_0-8.15.2-150000.8.9.1
SUSE Manager Server 4.1
libmilter1_0-8.15.2-150000.8.9.1
openSUSE Leap 15.3
libmilter-doc-8.15.2-150000.8.9.1
libmilter1_0-8.15.2-150000.8.9.1
rmail-8.15.2-150000.8.9.1
sendmail-8.15.2-150000.8.9.1
sendmail-devel-8.15.2-150000.8.9.1
sendmail-starttls-8.15.2-150000.8.9.1
openSUSE Leap 15.4
libmilter-doc-8.15.2-150000.8.9.1
libmilter1_0-8.15.2-150000.8.9.1
rmail-8.15.2-150000.8.9.1
sendmail-8.15.2-150000.8.9.1
sendmail-devel-8.15.2-150000.8.9.1
sendmail-starttls-8.15.2-150000.8.9.1

Ссылки

Описание

A Improper Link Resolution Before File Access ('Link Following') vulnerability in a script called by the sendmail systemd service of openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: SUSE openSUSE Factory sendmail versions prior to 8.17.1-1.1.

Затронутые продукты
Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libmilter1_0-8.15.2-150000.8.9.1
Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:libmilter1_0-8.15.2-150000.8.9.1
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:libmilter1_0-8.15.2-150000.8.9.1
Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:libmilter1_0-8.15.2-150000.8.9.1
Ссылки