Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 465
Alerts This Week
Warning Icon 1 465

SUSE: 2018:1930-2 Critical: obs-service-package_validator SQL Injection

suse
Calendar Grey July 20, 2016
Scroller Suse
Security update for obs-service_source_validator addressing code injection on SUSE Enterprise SDK.
An update that solves one vulnerability and has one errata An update that solves one vulnerability and has one errata An update that solves one vulnerability and has one errata is ...

Summary

This update for obs-service-source_validator to version 0.6+git20160531.fbfe336 fixes one security issue. This security issue was fixed: - CVE-2016-4007: harden source services against code/parameter injection (bsc#967265) This non-security issue was fixed: - bsc#967610: Several occurrences of uninitialized value Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP1: zypper in -t patch SUSE-SLE-SDK-12-SP1-2016-1078=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 12-SP1 (noarch): obs-service-source_validator-0.6+git20160531.fbfe336-5.3

Topics%20covered

Topics Covered

security advisory software patch SUSE code injection important update obs-service-source_validator

References

#967265 #967610

Cross- CVE-2016-4007

Affected Products:

SUSE Linux Enterprise Software Development Kit 12-SP1

https://www.suse.com/security/cve/CVE-2016-4007.html

https://bugzilla.suse.com/967265

https://bugzilla.suse.com/967610

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2016:1839-1
Rating: important

Topics%20covered

Topics Covered

security advisory software patch SUSE code injection important update obs-service-source_validator

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.