openSUSE-SU-2019:0242-1 | Mondoo Vulnerability Intelligence

openSUSE-SU-2019:0242-1

HIGH8.1

Security update for kauth

Published Apr 11, 2019

Modified 7 years ago

Fix available

Details

Description of the patch:

This update for kauth fixes the following issues:

Security issue fixed:

CVE-2019-7443: Fixed an insecure handling of arguments in helpers by removing the support of passing gui variants (bsc#1124863).

Affected Packages(18 packages)

extra-cmake-modules

SUSE Package Hub 12 SP1SUSE Package Hub 12 SP2SUSE Package Hub 12 SP3SUSE Package Hub 15openSUSE Leap 15.0

Fixed in:

5.32.0-7.2

kauth-devel

SUSE Package Hub 12 SP1SUSE Package Hub 12 SP2SUSE Package Hub 12 SP3SUSE Package Hub 15openSUSE Leap 15.0

Fixed in:

5.45.0-bp150.5.2

kauth-devel-32bit

SUSE Package Hub 12 SP1SUSE Package Hub 12 SP2SUSE Package Hub 12 SP3SUSE Package Hub 15openSUSE Leap 15.0

Fixed in:

5.45.0-lp150.5.2

kauth-devel-64bit

SUSE Package Hub 12 SP1SUSE Package Hub 12 SP2SUSE Package Hub 12 SP3SUSE Package Hub 15openSUSE Leap 15.0

Fixed in:

5.45.0-bp150.5.2

kcoreaddons

SUSE Package Hub 12 SP1SUSE Package Hub 12 SP2SUSE Package Hub 12 SP3SUSE Package Hub 15openSUSE Leap 15.0

Fixed in:

5.45.0-bp150.3.6.2

kcoreaddons-devel

SUSE Package Hub 12 SP1SUSE Package Hub 12 SP2SUSE Package Hub 12 SP3SUSE Package Hub 15openSUSE Leap 15.0

Fixed in:

5.45.0-bp150.3.6.2

kcoreaddons-devel-64bit

SUSE Package Hub 12 SP1SUSE Package Hub 12 SP2SUSE Package Hub 12 SP3SUSE Package Hub 15openSUSE Leap 15.0

Fixed in:

5.45.0-bp150.3.6.2

kcoreaddons-lang

SUSE Package Hub 12 SP1SUSE Package Hub 12 SP2SUSE Package Hub 12 SP3SUSE Package Hub 15openSUSE Leap 15.0

Fixed in:

5.45.0-bp150.3.6.2

libKF5Auth5

SUSE Package Hub 12 SP1SUSE Package Hub 12 SP2SUSE Package Hub 12 SP3SUSE Package Hub 15openSUSE Leap 15.0

Fixed in:

5.45.0-bp150.5.2

libKF5Auth5-32bit

SUSE Package Hub 12 SP1SUSE Package Hub 12 SP2SUSE Package Hub 12 SP3SUSE Package Hub 15openSUSE Leap 15.0

Fixed in:

5.45.0-lp150.5.2

References

https://bugzilla.suse.com/1124863

https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FVD5STKYWF7LYLT7SRZUXVAZWHNJ3DEG/#FVD5STKYWF7LYLT7SRZUXVAZWHNJ3DEG

https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FVD5STKYWF7LYLT7SRZUXVAZWHNJ3DEG/#FVD5STKYWF7LYLT7SRZUXVAZWHNJ3DEG

https://www.suse.com/security/cve/CVE-2019-7443/

https://www.suse.com/support/security/rating/

CVSS Analysis

CVSS v3.0

8.1

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

HighAC:H

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Upstream

Ecosystems

SUSE Package Hub 12 SP1 SUSE Package Hub 12 SP2 SUSE Package Hub 12 SP3 SUSE Package Hub 15 openSUSE Leap 15.0

Timeline

PublishedApr 11, 2019

ModifiedApr 11, 2019