This update fixes a privilege escalation via cross-site scripting and bad print job submission used to replace cupsd.conf on the server. This combination of issues could lead to remote code execution. CERT-VU-810572 has been assigned to this issue. Indications: Everybody should update. Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP3: zypper in -t patch sdksp3-cups=10707 - SUSE Linux Enterprise Server 11 SP3 for VMware: zypper in -t patch slessp3-cups=10707 - SUSE Linux Enterprise Server 11 SP3: zypper in -t patch slessp3-cups=10707 - SUSE Linux Enterprise Desktop 11 SP3: zypper in -t patch sledsp3-cups=10707 To bring your system up-to-date, use "zypper patch".
#924208
Affected Products:
SUSE Linux Enterprise Software Development Kit 11 SP3
SUSE Linux Enterprise Server 11 SP3 for VMware
SUSE Linux Enterprise Server 11 SP3
SUSE Linux Enterprise Desktop 11 SP3
https://bugzilla.suse.com/show_bug.cgi?id=924208
https://scc.suse.com:443/patches/
Get the latest Linux and open source security news straight to your inbox.