Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
This update for openslp fixes the following issues: - CVE-2017-17833: Prevent heap-related memory corruption issue which may have manifested itself as a denial-of-service or a remote code-execution vulnerability (bsc#1090638). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11-SP4: zypper in -t patch sdksp4-openslp-13690=1 - SUSE Linux Enterprise Server 11-SP4: zypper in -t patch slessp4-openslp-13690=1 - SUSE Linux Enterprise Server 11-SP3-LTSS: zypper in -t patch slessp3-openslp-13690=1 - SUSE Linux Enterprise Server 11-SECURITY: zypper in -t patch secsp3-openslp-13690=1
#1090638
Cross- CVE-2017-17833
Affected Products:
SUSE Linux Enterprise Software Development Kit 11-SP4
SUSE Linux Enterprise Server 11-SP4
SUSE Linux Enterprise Server 11-SP3-LTSS
SUSE Linux Enterprise Server 11-SECURITY
SUSE Linux Enterprise Point of Sale 11-SP3
SUSE Linux Enterprise Debuginfo 11-SP4
SUSE Linux Enterprise Debuginfo 11-SP3
https://www.suse.com/security/cve/CVE-2017-17833.html
https://bugzilla.suse.com/1090638
Get the latest Linux and open source security news straight to your inbox.