SUSE-SU-2019:1717-1
Security update for gvfs
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for gvfs fixes the following issues: Security issues fixed: - CVE-2019-12795: Fixed a vulnerability which could have allowed attacks via local D-Bus method calls (bsc#1137930). - CVE-2019-12447: Fixed an improper handling of file ownership in daemon/gvfsbackendadmin.c due to no use of setfsuid (bsc#1136986). - CVE-2019-12449: Fixed an improper handling of file's user and group ownership in daemon/gvfsbackendadmin.c (bsc#1136992). - CVE-2019-12448: Fixed race conditions in daemon/gvfsbackendadmin.c due to implementation of query_info_on_read/write at admin backend (bsc#1136981). Other issue addressed: - Drop polkit rules files that are only relevant for wheel group (bsc#1125433).
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 15 | gvfs, gvfs-backend-afc, gvfs-backend-samba y 4 más | 1.34.2.1-4.13.1 |
| SUSE Linux Enterprise 15.1 | gvfs, gvfs-backend-afc, gvfs-backend-samba y 4 más | 1.34.2.1-4.13.1 |
Mostrar las 14 entradas de 2 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 15 | gvfs | 1.34.2.1-4.13.1 |
| SUSE Linux Enterprise 15 | gvfs-backend-afc | 1.34.2.1-4.13.1 |
| SUSE Linux Enterprise 15 | gvfs-backend-samba | 1.34.2.1-4.13.1 |
| SUSE Linux Enterprise 15 | gvfs-backends | 1.34.2.1-4.13.1 |
| SUSE Linux Enterprise 15 | gvfs-devel | 1.34.2.1-4.13.1 |
| SUSE Linux Enterprise 15 | gvfs-fuse | 1.34.2.1-4.13.1 |
| SUSE Linux Enterprise 15 | gvfs-lang | 1.34.2.1-4.13.1 |
| SUSE Linux Enterprise 15.1 | gvfs | 1.34.2.1-4.13.1 |
| SUSE Linux Enterprise 15.1 | gvfs-backend-afc | 1.34.2.1-4.13.1 |
| SUSE Linux Enterprise 15.1 | gvfs-backend-samba | 1.34.2.1-4.13.1 |
| SUSE Linux Enterprise 15.1 | gvfs-backends | 1.34.2.1-4.13.1 |
| SUSE Linux Enterprise 15.1 | gvfs-devel | 1.34.2.1-4.13.1 |
| SUSE Linux Enterprise 15.1 | gvfs-fuse | 1.34.2.1-4.13.1 |
| SUSE Linux Enterprise 15.1 | gvfs-lang | 1.34.2.1-4.13.1 |
Referencias
- https://bugzilla.suse.com/1125433
- https://bugzilla.suse.com/1136981
- https://bugzilla.suse.com/1136986
- https://bugzilla.suse.com/1136992
- https://bugzilla.suse.com/1137930
- https://lists.suse.com/pipermail/sle-security-updates/2019-July/005636.html
- https://www.suse.com/security/cve/CVE-2019-12447/
- https://www.suse.com/security/cve/CVE-2019-12448/