SUSE-SU-2017:1335-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2017:1335-1

HIGH7.8

Security update for kdelibs4

Published May 18, 2017

Modified 9 years ago

Fix available

Details

Description of the patch:

This update for kdelibs4 fixes the following issues:

CVE-2017-8422: This update fixes problem in the DBUS authentication of the kauth framework that could be used to escalate privileges depending on bugs or misimplemented dbus services. (boo#1036244)

Affected Packages

libkde4

SUSE Linux Enterprise Desktop 12 SP1SUSE Linux Enterprise Desktop 12 SP2SUSE Linux Enterprise Server 12 SP1SUSE Linux Enterprise Server 12 SP2SUSE Linux Enterprise Server for Raspberry Pi 12 SP2

Fixed in:

4.12.0-10.1

libkde4-32bit

SUSE Linux Enterprise Desktop 12 SP1SUSE Linux Enterprise Desktop 12 SP2SUSE Linux Enterprise Server 12 SP1SUSE Linux Enterprise Server 12 SP2SUSE Linux Enterprise Server for SAP Applications 12 SP1

Fixed in:

4.12.0-10.1

libkdecore4

SUSE Linux Enterprise Desktop 12 SP1SUSE Linux Enterprise Desktop 12 SP2SUSE Linux Enterprise Server 12 SP1SUSE Linux Enterprise Server 12 SP2SUSE Linux Enterprise Server for Raspberry Pi 12 SP2

Fixed in:

4.12.0-10.1

libkdecore4-32bit

SUSE Linux Enterprise Desktop 12 SP1SUSE Linux Enterprise Desktop 12 SP2SUSE Linux Enterprise Server 12 SP1SUSE Linux Enterprise Server 12 SP2SUSE Linux Enterprise Server for SAP Applications 12 SP1

Fixed in:

4.12.0-10.1

libksuseinstall1

SUSE Linux Enterprise Desktop 12 SP1SUSE Linux Enterprise Desktop 12 SP2SUSE Linux Enterprise Server 12 SP1SUSE Linux Enterprise Server 12 SP2SUSE Linux Enterprise Server for Raspberry Pi 12 SP2

Fixed in:

4.12.0-10.1

libksuseinstall1-32bit

SUSE Linux Enterprise Desktop 12 SP1SUSE Linux Enterprise Desktop 12 SP2SUSE Linux Enterprise Server 12 SP1SUSE Linux Enterprise Server 12 SP2SUSE Linux Enterprise Server for SAP Applications 12 SP1

Fixed in:

4.12.0-10.1

References

ADVISORY

https://bugzilla.suse.com/1036244

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2017-May/002894.html

ADVISORY

https://www.suse.com/security/cve/CVE-2017-8422/

WEB

https://www.suse.com/support/security/rating/

ADVISORY