SUSE-SU-2019:13981-1

HIGH7.5

Security update for openwsman

Published Mar 18, 2019

Modified 7 years ago

Fix available

Details

Description of the patch:

This update for openwsman fixes the following issues:

Security issues fixed:

CVE-2019-3816: Fixed a vulnerability in openwsmand deamon which could lead to arbitary file disclosure (bsc#1122623).
CVE-2019-3833: Fixed a vulnerability in process_connection() which could allow an attacker to trigger an infinite loop which leads to Denial of Service (bsc#1122623).

Affected Packages

libwsman-devel

SUSE Linux Enterprise Desktop 11 SP4SUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server for SAP Applications 11 SP4SUSE Linux Enterprise Software Development Kit 11 SP4

Fixed in:

2.2.3-0.16.8.1

openwsman-python

SUSE Linux Enterprise Desktop 11 SP4SUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server for SAP Applications 11 SP4SUSE Linux Enterprise Software Development Kit 11 SP4

Fixed in:

2.2.3-0.16.8.1

References

ADVISORY

https://bugzilla.suse.com/1122623

ADVISORY

https://www.suse.com/security/cve/CVE-2019-3816/

ADVISORY

https://www.suse.com/security/cve/CVE-2019-3833/

WEB

https://www.suse.com/support/security/rating/

ADVISORY