Lucene search

K
suseSuseSUSE-SU-2014:0928-1
HistoryJul 23, 2014 - 11:04 p.m.

Security update for ppc64-diag (important)

2014-07-2323:04:53
lists.opensuse.org
9

0.0004 Low

EPSS

Percentile

5.1%

ppc64-diag has been updated to prevent the usage of predictable filenames
in /tmp in various scripts and daemons (CVE-2014-4038) Also the snapshot
tarball was previously generated world readable, which could have leaked
sensible information, which is only visible to root, to all users. It is
now readable for root only (CVE-2014-4039).

Security Issues:

   * CVE-2014-4038
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4038">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4038</a>&gt;
   * CVE-2014-4039
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4039">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4039</a>&gt;
OSVersionArchitecturePackageVersionFilename
SUSE Linux Enterprise Server11.3ppc64ppc64-diag< 2.6.1-0.14.1ppc64-diag-2.6.1-0.14.1.ppc64.rpm

0.0004 Low

EPSS

Percentile

5.1%