SUSE-SU-2016:0112-1

Details

This update fixes the following security issues:

CVE-2015-8327: adds backtick and semicolon to the list of illegal shell escape characters (bsc#957531). CVE-2015-8560: fixed code execution via improper escaping of ; (bsc#957531).

Affected Packages

foomatic-filters

SUSE Linux Enterprise Desktop 11 SP3SUSE Linux Enterprise Desktop 11 SP4SUSE Linux Enterprise Server 11 SP3SUSE Linux Enterprise Server 11 SP3-TERADATASUSE Linux Enterprise Server 11 SP4

Fixed in:

3.0.2-269.39.1

References

REPORT

https://bugzilla.suse.com/957531

WEB

https://www.suse.com/security/cve/CVE-2015-8327

WEB

https://www.suse.com/security/cve/CVE-2015-8560

ADVISORY

https://www.suse.com/support/update/announcement/2016/suse-su-20160112-1/