Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for bzr ______________________________________________________________________________ Announcement ID: SUSE-SU-2018:1489-1 Rating: moderate References: #1058214 Cross-References: CVE-2017-14176 Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP4 SUSE Linux Enterprise Debuginfo 11-SP4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Bzr was updated to fix a security issue: - CVE-2017-14176: Avoid code execution using ssh:// url injection (boo#1058214) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11-SP4: zypper in -t patch sdksp4-bzr-13637=1 - SUSE Linux Enterprise Debuginfo 11-SP4: zypper in -t patch dbgsp4-bzr-13637=1 Package List: - SUSE Linux Enterprise Software Development Kit 11-SP4 (i586 ia64 ppc64 s390x x86_64): bzr-1.8-3.5.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (i586 ia64 ppc64 s390x x86_64): bzr-debuginfo-1.8-3.5.1 bzr-debugsource-1.8-3.5.1 References: https://www.suse.com/security/cve/CVE-2017-14176.html https://bugzilla.suse.com/1058214 . Ubuntu Security Notice for git resolves a low-severity vulnerability related to http url manipulation. Implement suggested patches.. SUSE Security Update,bzr Patch,Moderate Severity Fix,ssh URL Injection. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.