Stay Secure with the Latest Linux Advisories

security advisoryupdatepatch

SUSE 11 SP3: SUSE-SU-2014:0847-1 Important Rights Assignment Fix

An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.. SUSE Security Update: Security update for novell-qtgui, novell-ui-base ______________________________________________________________________________ Announcement ID: SUSE-SU-2014:0847-1 Rating: important References: #872796 Cross-References: CVE-2014-0595 Affected Products: SUSE Linux Enterprise Desktop 11 SP3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Packages novell-ui-base and novell-qtgui were updated to prevent erroneous rights assignment when a user is granted 'File Scan' rights (F). In this case nwrights was assigning Supervisor (S) rights. (CVE-2014-0595) Further information is available at https://login.microfocus.com/nidp/app/login?sid=0 . Security Issue reference: * CVE-2014-0595 Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Desktop 11 SP3: zypper in -t patch sledsp3-novell-ui-201405-9276 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Desktop 11 SP3 (i586 x86_64): novell-qtgui-3.0.0-0.20.1 novell-qtgui-cli-3.0.0-0.20.1 novell-ui-base-3.0.0-0.10.1 References: https://www.suse.com/security/cve/CVE-2014-0595.html https://login.microfocus.com/nidp/app/login?sid=0 https://scc.suse.com:443/patches/ . Critical SUSE Security Patch for novell-qtgui and novell-ui-core addresses incorrect permissions settings. Update immediately.. SUSE Update, Rights Assignment Issue, Security Update. . Severity: Important. LinuxSecurity.com Team

Jun 26, 2014 •Important SuSE