Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
openvpn
(any)
openvpn-auth-pam-plugin
(any)
openvpn-auth-pam-plugin-debuginfo
(any)
openvpn-debuginfo
(any)
openvpn-debugsource
(any)
Описание
Уведомление безопасности об уязвимостях SUSE Linux Enterprise Server 12-SP2, SUSE OpenStack Cloud 6, SUSE Linux Enterprise Server 12-LTSS, SUSE Linux Enterprise Desktop 12-SP2, SUSE Linux Enterprise Server for SAP 12, SUSE Linux Enterprise Server 12-SP1-LTSS, SUSE Linux Enterprise Server for SAP 12-SP1, SUSE Linux Enterprise Server for Raspberry Pi 12-SP2
Как исправить
Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
SUSE Linux Enterprise Server 12-SP2:
aarch64, ppc64le, x86_64:
openvpn-auth-pam-plugin - 2.3.8-16.17.1
openvpn-debuginfo - 2.3.8-16.17.1
openvpn-auth-pam-plugin-debuginfo - 2.3.8-16.17.1
openvpn - 2.3.8-16.17.1
openvpn-debugsource - 2.3.8-16.17.1
SUSE OpenStack Cloud 6:
x86_64:
openvpn-auth-pam-plugin - 2.3.8-16.17.1
openvpn-debuginfo - 2.3.8-16.17.1
openvpn-auth-pam-plugin-debuginfo - 2.3.8-16.17.1
openvpn - 2.3.8-16.17.1
openvpn-debugsource - 2.3.8-16.17.1
SUSE Linux Enterprise Server 12-LTSS:
ppc64le, s390x, x86_64:
openvpn-auth-pam-plugin - 2.3.8-16.17.1
openvpn-debuginfo - 2.3.8-16.17.1
openvpn-auth-pam-plugin-debuginfo - 2.3.8-16.17.1
openvpn - 2.3.8-16.17.1
openvpn-debugsource - 2.3.8-16.17.1
SUSE Linux Enterprise Desktop 12-SP2:
x86_64:
openvpn-debuginfo - 2.3.8-16.17.1
openvpn - 2.3.8-16.17.1
openvpn-debugsource - 2.3.8-16.17.1
SUSE Linux Enterprise Server for SAP 12:
x86_64:
openvpn-auth-pam-plugin - 2.3.8-16.17.1
openvpn-debuginfo - 2.3.8-16.17.1
openvpn-auth-pam-plugin-debuginfo - 2.3.8-16.17.1
openvpn - 2.3.8-16.17.1
openvpn-debugsource - 2.3.8-16.17.1
SUSE Linux Enterprise Server 12-SP1-LTSS:
ppc64le, s390x, x86_64:
openvpn-auth-pam-plugin - 2.3.8-16.17.1
openvpn-debuginfo - 2.3.8-16.17.1
openvpn-auth-pam-plugin-debuginfo - 2.3.8-16.17.1
openvpn - 2.3.8-16.17.1
openvpn-debugsource - 2.3.8-16.17.1
SUSE Linux Enterprise Server for SAP 12-SP1:
ppc64le, x86_64:
openvpn-auth-pam-plugin - 2.3.8-16.17.1
openvpn-debuginfo - 2.3.8-16.17.1
openvpn-auth-pam-plugin-debuginfo - 2.3.8-16.17.1
openvpn - 2.3.8-16.17.1
openvpn-debugsource - 2.3.8-16.17.1
SUSE Linux Enterprise Server for Raspberry Pi 12-SP2:
aarch64:
openvpn-auth-pam-plugin - 2.3.8-16.17.1
openvpn-debuginfo - 2.3.8-16.17.1
openvpn-auth-pam-plugin-debuginfo - 2.3.8-16.17.1
openvpn - 2.3.8-16.17.1
openvpn-debugsource - 2.3.8-16.17.1
SUSE Linux Enterprise Server 12-SP2:
aarch64, ppc64le, x86_64:
openvpn-auth-pam-plugin - 2.3.8-16.17.1
openvpn-debuginfo - 2.3.8-16.17.1
openvpn-auth-pam-plugin-debuginfo - 2.3.8-16.17.1
openvpn - 2.3.8-16.17.1
openvpn-debugsource - 2.3.8-16.17.1
SUSE OpenStack Cloud 6:
x86_64:
openvpn-auth-pam-plugin - 2.3.8-16.17.1
openvpn-debuginfo - 2.3.8-16.17.1
openvpn-auth-pam-plugin-debuginfo - 2.3.8-16.17.1
openvpn - 2.3.8-16.17.1
openvpn-debugsource - 2.3.8-16.17.1
SUSE Linux Enterprise Server 12-LTSS:
ppc64le, s390x, x86_64:
openvpn-auth-pam-plugin - 2.3.8-16.17.1
openvpn-debuginfo - 2.3.8-16.17.1
openvpn-auth-pam-plugin-debuginfo - 2.3.8-16.17.1
openvpn - 2.3.8-16.17.1
openvpn-debugsource - 2.3.8-16.17.1
SUSE Linux Enterprise Desktop 12-SP2:
x86_64:
openvpn-debuginfo - 2.3.8-16.17.1
openvpn - 2.3.8-16.17.1
openvpn-debugsource - 2.3.8-16.17.1
SUSE Linux Enterprise Server for SAP 12:
x86_64:
openvpn-auth-pam-plugin - 2.3.8-16.17.1
openvpn-debuginfo - 2.3.8-16.17.1
openvpn-auth-pam-plugin-debuginfo - 2.3.8-16.17.1
openvpn - 2.3.8-16.17.1
openvpn-debugsource - 2.3.8-16.17.1
SUSE Linux Enterprise Server 12-SP1-LTSS:
ppc64le, s390x, x86_64:
openvpn-auth-pam-plugin - 2.3.8-16.17.1
openvpn-debuginfo - 2.3.8-16.17.1
openvpn-auth-pam-plugin-debuginfo - 2.3.8-16.17.1
openvpn - 2.3.8-16.17.1
openvpn-debugsource - 2.3.8-16.17.1
SUSE Linux Enterprise Server for SAP 12-SP1:
ppc64le, x86_64:
openvpn-auth-pam-plugin - 2.3.8-16.17.1
openvpn-debuginfo - 2.3.8-16.17.1
openvpn-auth-pam-plugin-debuginfo - 2.3.8-16.17.1
openvpn - 2.3.8-16.17.1
openvpn-debugsource - 2.3.8-16.17.1
SUSE Linux Enterprise Server for Raspberry Pi 12-SP2:
aarch64:
openvpn-auth-pam-plugin - 2.3.8-16.17.1
openvpn-debuginfo - 2.3.8-16.17.1
openvpn-auth-pam-plugin-debuginfo - 2.3.8-16.17.1
openvpn - 2.3.8-16.17.1
openvpn-debugsource - 2.3.8-16.17.1
Ссылки
http://lists.suse.com/pipermail/sle-security-updates/2017-June/002969.html
https://bugzilla.suse.com/1044947
Источник: CVE
Наименование: CVE-2017-7508
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7508
Источник: CVE
Наименование: CVE-2017-7521
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7521
Источник: CVE
Наименование: CVE-2017-7520
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7520
https://bugzilla.suse.com/1044947
Источник: CVE
Наименование: CVE-2017-7508
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7508
Источник: CVE
Наименование: CVE-2017-7521
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7521
Источник: CVE
Наименование: CVE-2017-7520
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7520
