gpp_maybe Security update for tcmu-runner

SUSE-SLE-SERVER-12-SP3-2017-1311

This update for tcmu-runner fixes the following issues: - qcow handler opens up an information leak via the CheckConfig D-Bus method (bsc#1049491) - glfs handler allows local DoS via crafted CheckConfig strings (bsc#1049485) - UnregisterHandler dbus method in tcmu-runner daemon for non-existing handler causes denial of service (bsc#1049488) - UnregisterHandler D-Bus method in tcmu-runner daemon for internal handler causes denial of service (bsc#1049489) - Memory leaks can be triggered in tcmu-runner daemon by calling D-Bus method for (Un)RegisterHandler (bsc#1049490)

• Release Date
  Aug 9 2017
• References
  Bugzilla: 1049488, 1049489, 1049485, 1049490, 1049491
  
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12.3 ppc64le

• Packages
  libtcmu1
  Runtime libraries for tcmu-runner

  1.2.0-2.3.1

  lock rpm

  tcmu-runner
  A userspace daemon that handles the LIO TCM-User backstore

  1.2.0-2.3.1

  lock rpm

  lock src

SUSE Linux Enterprise Server 12.3 aarch64

• Packages
  libtcmu1
  Runtime libraries for tcmu-runner

  1.2.0-2.3.1

  lock rpm

  tcmu-runner
  A userspace daemon that handles the LIO TCM-User backstore

  1.2.0-2.3.1

  lock rpm

  lock src

SUSE Linux Enterprise Server 12.3 s390x

• Packages
  libtcmu1
  Runtime libraries for tcmu-runner

  1.2.0-2.3.1

  lock rpm

  tcmu-runner
  A userspace daemon that handles the LIO TCM-User backstore

  1.2.0-2.3.1

  lock rpm

  lock src

SUSE Linux Enterprise Server 12.3 x86_64

• Packages
  libtcmu1
  Runtime libraries for tcmu-runner

  1.2.0-2.3.1

  lock rpm

  tcmu-runner
  A userspace daemon that handles the LIO TCM-User backstore

  1.2.0-2.3.1

  lock rpm

  lock src