SUSE-SU-2018:3467-2
Security update for smt
Kaynağa göre önem derecesi
Hiçbir kaynak CVSS puanı vermiyor.
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: SUSE.
Açıklama
SMT was updated to version 3.0.38. Following security issue was fixed: - CVE-2018-12472: Harden hostname check during sibling check by forcing double reverse lookup (bsc#1104076) Following non security issues were fixed: - Add migration path check when registration sharing is enabled - Fix sibling sync errors (bsc#1111056): - Synchronize all registered products - Handle duplicate registrations when syncing - Force resync to the sibling instance in `upgrade` and `synchronize` API calls
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| SUSE Linux Enterprise 12.1 | res-signingkeys, smt, smt-support | 3.0.38-52.26.1 |
1 kaynaktaki 3 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| SUSE Linux Enterprise 12.1 | res-signingkeys | 3.0.38-52.26.1 |
| SUSE Linux Enterprise 12.1 | smt | 3.0.38-52.26.1 |
| SUSE Linux Enterprise 12.1 | smt-support | 3.0.38-52.26.1 |
Referanslar
- https://bugzilla.suse.com/1104076
- https://bugzilla.suse.com/1111056
- https://lists.suse.com/pipermail/sle-security-updates/2019-April/005406.html
- https://www.suse.com/security/cve/CVE-2018-12472/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2018/suse-su-20183467-2/