shield Security update for supportutils

slessp4-supportutils-13976

This update for supportutils fixes the following issues: Security vulnerabilities fixed: - CVE-2018-19636: Local root exploit via inclusion of attacker controlled shell script (bsc#1117751) - CVE-2018-19640: Users can kill arbitrary processes (bsc#1118463) - CVE-2018-19638: User can overwrite arbitrary log files in support tar (bsc#1118460) - CVE-2018-19639: Code execution if run with -v (bsc#1118462)

• Release Date
  Mar 12 2019
• References
  Bugzilla: 1118462, 1118463, 1118460, 1117751
  CVEs: CVE-2018-19640, CVE-2018-19638, CVE-2018-19636, CVE-2018-19639
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 11.4 ia64

• Packages
  supportutils
  Support Troubleshooting Tools

  1.20-122.9.1 lock rpm lock src

SUSE Linux Enterprise Server for SAP Applications 11.4 ppc64

• Packages
  supportutils
  Support Troubleshooting Tools

  1.20-122.9.1 lock rpm lock src

SUSE Linux Enterprise Server 11.4 s390x

• Packages
  supportutils
  Support Troubleshooting Tools

  1.20-122.9.1 lock rpm lock src

SUSE Linux Enterprise Server for SAP All-in-One 11.4 x86_64

• Packages
  supportutils
  Support Troubleshooting Tools

  1.20-122.9.1 lock rpm lock src

SUSE Linux Enterprise Server 11.4 i586

• Packages
  supportutils
  Support Troubleshooting Tools

  1.20-122.9.1 lock rpm lock src