Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

openSUSE Leap 42.1 2016:1660-1 Important Code Injection Alert

opensuse
Calendar Grey June 22, 2016
Scroller Opensuse
Patch issued for openSUSE: obs-service_source_validator resolves major vulnerabilities. Follow the steps provided.
An update that solves one vulnerability and has one errata An update that solves one vulnerability and has one errata An update that solves one vulnerability and has one errata is ...

Description

obs-service-source_validator was updated to fix one security issue.

This security issue was fixed:

- CVE-2016-4007: Several maintained source services are vulnerable to

code/paramter injection (bsc#967265).

This non-security issue was fixed:

- bsc#967610: Several occurrences of uninitialized value.

Topics%20covered

Topics Covered

security advisory security issue code injection important update openSUSE patch instructions obs-service-source_validator

Patch

Patch Instructions:

To install this openSUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

- openSUSE Leap 42.1:

zypper in -t patch openSUSE-2016-759=1

To bring your system up-to-date, use "zypper patch".

Package List

- openSUSE Leap 42.1 (noarch):

obs-service-source_validator-0.6+git20160531.fbfe336-11.1

References

https://www.suse.com/security/cve/CVE-2016-4007.html

https://bugzilla.suse.com/show_bug.cgi?id=967265

https://bugzilla.suse.com/show_bug.cgi?id=967610

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2016:1660-1
Rating: important
Affected Products: openSUSE Leap 42.1

Topics%20covered

Topics Covered

security advisory security issue code injection important update openSUSE patch instructions obs-service-source_validator

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.