Уведомление безопасности SUSE-SU-2017:0302-1

Высокая (7.2)

(AV:L/AC:L/Au:N/C:C/I:C/A:C)

SUSE

bash (any) bash-doc (any) bash-x86 (any) libreadline5 (any) libreadline5-32bit (any) libreadline5-x86 (any) readline-devel (any) readline-devel-32bit (any) readline-doc (any)

Уведомление безопасности об уязвимостях SUSE Linux Enterprise Debuginfo 11-SP4, SUSE Linux Enterprise Software Development Kit 11-SP4, SUSE Linux Enterprise Server 11-SP4

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
SUSE Linux Enterprise Debuginfo 11-SP4:
ia64:
bash-debuginfo-x86 - 3.2-147.29.1
SUSE Linux Enterprise Debuginfo 11-SP4:
i586, ia64, ppc64, s390x, x86_64:
bash-debugsource - 3.2-147.29.1
bash-debuginfo - 3.2-147.29.1
SUSE Linux Enterprise Software Development Kit 11-SP4:
i586, ia64, ppc64, s390x, x86_64:
readline-devel - 5.2-147.29.1
SUSE Linux Enterprise Software Development Kit 11-SP4:
i586, x86_64:
libreadline5 - 5.2-147.29.1
SUSE Linux Enterprise Software Development Kit 11-SP4:
ppc64, s390x, x86_64:
readline-devel-32bit - 5.2-147.29.1
SUSE Linux Enterprise Server 11-SP4:
ia64:
bash-x86 - 3.2-147.29.1
libreadline5-x86 - 5.2-147.29.1
SUSE Linux Enterprise Server 11-SP4:
i586, ia64, ppc64, s390x, x86_64:
bash-doc - 3.2-147.29.1
libreadline5 - 5.2-147.29.1
readline-doc - 5.2-147.29.1
bash - 3.2-147.29.1
SUSE Linux Enterprise Server 11-SP4:
ppc64, s390x, x86_64:
libreadline5-32bit - 5.2-147.29.1

http://lists.suse.com/pipermail/sle-security-updates/2017-January/002602.html
https://bugzilla.suse.com/1000396
https://bugzilla.suse.com/1001299
https://bugzilla.suse.com/959755
https://bugzilla.suse.com/971410

Источник: CVE
Наименование: CVE-2016-0634
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0634

Источник: CVE
Наименование: CVE-2016-7543
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7543