Описание
Security update for munge
This update for munge fixes the following issues:
Security issue fixed:
- CVE-2019-3691: Fixed a Local privilege escalation vulnerability which allowed escalation from munge to root (bsc#1155075).
This update was imported from the SUSE:SLE-15:Update update project.
Список пакетов
openSUSE Leap 15.1
libmunge2-0.5.13-lp151.4.3.1
libmunge2-32bit-0.5.13-lp151.4.3.1
munge-0.5.13-lp151.4.3.1
munge-devel-0.5.13-lp151.4.3.1
munge-devel-32bit-0.5.13-lp151.4.3.1
Ссылки
- E-Mail link for openSUSE-SU-2019:2670-1
- SUSE Security Ratings
- SUSE Bug 1155075
- SUSE CVE CVE-2019-3691 page
Описание
A Symbolic Link (Symlink) Following vulnerability in the packaging of munge in SUSE Linux Enterprise Server 15; openSUSE Factory allowed local attackers to escalate privileges from user munge to root. This issue affects: SUSE Linux Enterprise Server 15 munge versions prior to 0.5.13-4.3.1. openSUSE Factory munge versions prior to 0.5.13-6.1.
Затронутые продукты
openSUSE Leap 15.1:libmunge2-0.5.13-lp151.4.3.1
openSUSE Leap 15.1:libmunge2-32bit-0.5.13-lp151.4.3.1
openSUSE Leap 15.1:munge-0.5.13-lp151.4.3.1
openSUSE Leap 15.1:munge-devel-0.5.13-lp151.4.3.1
Ссылки
- CVE-2019-3691
- SUSE Bug 1154062
- SUSE Bug 1155075