Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 415
Alerts This Week
Warning Icon 1 415

openSUSE 13.2: 2016:1659-1 Important: Code Injection Risk Fixed

opensuse
Calendar Grey June 22, 2016
Dist Opensuse Esm H88
Important revision for obs-service_source_validator mitigates potential code execution vulnerabilities in openSUSE environments.
An update that solves one vulnerability and has one errata is now available.

Description

obs-service-source_validator was updated to fix one security issue.

This security issue was fixed:

- CVE-2016-4007: Several maintained source services are vulnerable to

code/paramter injection (bsc#967265).

This non-security issue was fixed:

- bsc#967610: Several occurrences of uninitialized value.

Topics%20covered

Topics Covered

security advisory security fix code injection important update openSUSE service validation

Patch

Patch Instructions:

To install this openSUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

- openSUSE 13.2:

zypper in -t patch openSUSE-2016-758=1

To bring your system up-to-date, use "zypper patch".

Package List

- openSUSE 13.2 (noarch):

obs-service-source_validator-0.6+git20160531.fbfe336-9.1

References

https://www.suse.com/security/cve/CVE-2016-4007.html

https://bugzilla.suse.com/967265

https://bugzilla.suse.com/967610

--

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2016:1659-1
Rating: important
Affected Products: openSUSE 13.2 le.

Topics%20covered

Topics Covered

security advisory security fix code injection important update openSUSE service validation

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.