Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:02740-1

Опубликовано: 08 авг. 2025
Источник: suse-cvrf

Описание

Security update for tgt

This update for tgt fixes the following issues:

  • CVE-2024-45751: Fixed CHAP authentication bypass in user-space Linux target framework (bsc#1230360)

Список пакетов

SUSE Linux Enterprise Module for Basesystem 15 SP6
tgt-1.0.85-150600.10.3.1
SUSE Linux Enterprise Module for Basesystem 15 SP7
tgt-1.0.85-150600.10.3.1
openSUSE Leap 15.6
tgt-1.0.85-150600.10.3.1

Ссылки

Описание

tgt (aka Linux target framework) before 1.0.93 attempts to achieve entropy by calling rand without srand. The PRNG seed is always 1, and thus the sequence of challenges is always identical.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP6:tgt-1.0.85-150600.10.3.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:tgt-1.0.85-150600.10.3.1
openSUSE Leap 15.6:tgt-1.0.85-150600.10.3.1
Ссылки