Уведомление безопасности SUSE-SU-2012:0988-1

Средняя (4.6)

(AV:L/AC:L/Au:N/C:P/I:P/A:P)

SUSE

bash (any) bash-doc (any) bash-x86 (any) libreadline5 (any) libreadline5-32bit (any) libreadline5-x86 (any) readline (any) readline-32bit (any) readline-64bit (any) readline-devel (any) readline-devel-32bit (any) readline-devel-64bit (any) readline-doc (any) readline-x86 (any)

Уведомление безопасности об уязвимостях SUSE Linux Enterprise Software Development Kit 11 SP2, SUSE Linux Enterprise Software Development Kit 11 SP1, SUSE Linux Enterprise Server 11 SP1 for VMware, SUSE Linux Enterprise Server 11 SP2, SUSE Linux Enterprise Desktop 11 SP1, SUSE Linux Enterprise Desktop 11 SP2, SUSE Linux Enterprise Server 11 SP1, SUSE Linux Enterprise Desktop 10 SP4, SUSE Linux Enterprise Server 10 SP4

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
SUSE Linux Enterprise Software Development Kit 11 SP2:
i586, ia64, ppc64, s390x, x86_64:
readline-devel - 5.2-147.12.1
SUSE Linux Enterprise Software Development Kit 11 SP2:
i586, x86_64:
libreadline5 - 5.2-147.12.1
SUSE Linux Enterprise Software Development Kit 11 SP2:
ppc64, s390x, x86_64:
readline-devel-32bit - 5.2-147.12.1
SUSE Linux Enterprise Software Development Kit 11 SP1:
i586, ia64, ppc64, s390x, x86_64:
readline-devel - 5.2-147.12.1
SUSE Linux Enterprise Software Development Kit 11 SP1:
i586, x86_64:
libreadline5 - 5.2-147.12.1
SUSE Linux Enterprise Software Development Kit 11 SP1:
ppc64, s390x, x86_64:
readline-devel-32bit - 5.2-147.12.1
SUSE Linux Enterprise Server 11 SP1 for VMware:
x86_64:
libreadline5-32bit - 5.2-147.12.1
SUSE Linux Enterprise Server 11 SP1 for VMware:
i586, x86_64:
libreadline5 - 5.2-147.12.1
readline-doc - 5.2-147.12.1
bash - 3.2-147.12.1
bash-doc - 3.2-147.12.1
SUSE Linux Enterprise Server 11 SP2:
ia64:
libreadline5-x86 - 5.2-147.12.1
bash-x86 - 3.2-147.12.1
SUSE Linux Enterprise Server 11 SP2:
i586, ia64, ppc64, s390x, x86_64:
libreadline5 - 5.2-147.12.1
readline-doc - 5.2-147.12.1
bash - 3.2-147.12.1
bash-doc - 3.2-147.12.1
SUSE Linux Enterprise Server 11 SP2:
ppc64, s390x, x86_64:
libreadline5-32bit - 5.2-147.12.1
SUSE Linux Enterprise Desktop 11 SP1:
x86_64:
libreadline5-32bit - 5.2-147.12.1
SUSE Linux Enterprise Desktop 11 SP1:
i586, x86_64:
libreadline5 - 5.2-147.12.1
readline-doc - 5.2-147.12.1
bash - 3.2-147.12.1
bash-doc - 3.2-147.12.1
SUSE Linux Enterprise Desktop 11 SP2:
x86_64:
libreadline5-32bit - 5.2-147.12.1
SUSE Linux Enterprise Desktop 11 SP2:
i586, x86_64:
libreadline5 - 5.2-147.12.1
readline-doc - 5.2-147.12.1
bash - 3.2-147.12.1
bash-doc - 3.2-147.12.1
SUSE Linux Enterprise Server 11 SP1:
ia64:
libreadline5-x86 - 5.2-147.12.1
bash-x86 - 3.2-147.12.1
SUSE Linux Enterprise Server 11 SP1:
i586, ia64, ppc64, s390x, x86_64:
libreadline5 - 5.2-147.12.1
readline-doc - 5.2-147.12.1
bash - 3.2-147.12.1
bash-doc - 3.2-147.12.1
SUSE Linux Enterprise Server 11 SP1:
ppc64, s390x, x86_64:
libreadline5-32bit - 5.2-147.12.1
SUSE Linux Enterprise Desktop 10 SP4:
x86_64:
readline-devel-32bit - 5.1-24.30.1
readline-32bit - 5.1-24.30.1
SUSE Linux Enterprise Desktop 10 SP4:
i586, x86_64:
bash - 3.1-24.30.1
readline - 5.1-24.30.1
readline-devel - 5.1-24.30.1
SUSE Linux Enterprise Server 10 SP4:
ia64:
bash-x86 - 3.1-24.30.1
readline-x86 - 5.1-24.30.1
SUSE Linux Enterprise Server 10 SP4:
i586, ia64, ppc, ppc64, s390x, x86_64:
bash - 3.1-24.30.1
SUSE Linux Enterprise Server 10 SP4:
s390x, x86_64:
readline-devel-32bit - 5.1-24.30.1
readline-32bit - 5.1-24.30.1
SUSE Linux Enterprise Server 10 SP4:
ppc:
readline-64bit - 5.1-24.30.1
readline-devel-64bit - 5.1-24.30.1
SUSE Linux Enterprise Server 10 SP4:
i586, ia64, ppc, s390x, x86_64:
readline - 5.1-24.30.1
readline-devel - 5.1-24.30.1

http://lists.suse.com/pipermail/sle-security-updates/2012-August/000206.html
https://bugzilla.novell.com/770795
http://download.novell.com/patch/finder/?keywords=9f2f628509b07725b6cc9d5d8f9ede1a
http://download.novell.com/patch/finder/?keywords=c3e9a373f5df9b9efa73a076b434ff96

Источник: CVE
Наименование: CVE-2012-3410
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3410