Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 507
Alerts This Week
Warning Icon 1 507

SUSE: 2016:1640-1 Critical: OpenSSL, Network Vulnerability Patch

suse
Calendar Grey June 21, 2016
Scroller Suse
SUSE Security Update addressing vulnerabilities in libimobiledevice and usbmuxd resolves a critical security concern impacting various distributions.
An update that fixes one vulnerability is now available

Summary

libimobiledevice, usbmuxd were updated to fix one security issue. This security issue was fixed: - CVE-2016-5104: Sockets listening on INADDR_ANY instead of only locally (982014). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Workstation Extension 12-SP1: zypper in -t patch SUSE-SLE-WE-12-SP1-2016-973=1 - SUSE Linux Enterprise Workstation Extension 12: zypper in -t patch SUSE-SLE-WE-12-2016-973=1 - SUSE Linux Enterprise Software Development Kit 12-SP1: zypper in -t patch SUSE-SLE-SDK-12-SP1-2016-973=1 - SUSE Linux Enterprise Software Development Kit 12: zypper in -t patch SUSE-SLE-SDK-12-2016-973=1 - SUSE Linux Enterprise Server 12-SP1:

Topics%20covered

Topics Covered

security advisory security issue important SUSE libimobiledevice usbmuxd

References

#982014

Cross- CVE-2016-5104

Affected Products:

SUSE Linux Enterprise Workstation Extension 12-SP1

SUSE Linux Enterprise Workstation Extension 12

SUSE Linux Enterprise Software Development Kit 12-SP1

SUSE Linux Enterprise Software Development Kit 12

SUSE Linux Enterprise Server 12-SP1

SUSE Linux Enterprise Server 12

SUSE Linux Enterprise Desktop 12-SP1

SUSE Linux Enterprise Desktop 12

https://www.suse.com/security/cve/CVE-2016-5104.html

https://bugzilla.suse.com/982014

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2016:1639-1
Rating: important

Topics%20covered

Topics Covered

security advisory security issue important SUSE libimobiledevice usbmuxd

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.