Описание
Security update for kinit
kinit was updated to fix one security issue.
This security issue was fixed:
- CVE-2016-3100: World readable Xauthority file exposed cookie credentials (boo#983926).
Список пакетов
openSUSE Leap 42.1
kinit-5.21.0-15.1
kinit-32bit-5.21.0-15.1
kinit-devel-5.21.0-15.1
kinit-lang-5.21.0-15.1
Ссылки
- E-Mail link for openSUSE-SU-2016:1723-1
- SUSE Security Ratings
Описание
kinit in KDE Frameworks before 5.23.0 uses weak permissions (644) for /tmp/xauth-xxx-_y, which allows local users to obtain X11 cookies of other users and consequently capture keystrokes and possibly gain privileges by reading the file.
Затронутые продукты
openSUSE Leap 42.1:kinit-32bit-5.21.0-15.1
openSUSE Leap 42.1:kinit-5.21.0-15.1
openSUSE Leap 42.1:kinit-devel-5.21.0-15.1
openSUSE Leap 42.1:kinit-lang-5.21.0-15.1
Ссылки
- CVE-2016-3100
- SUSE Bug 983926