Уведомление безопасности SUSE-SU-2017:2294-1

Критичная (7.8)

(AV:N/AC:L/Au:N/C:N/I:N/A:C)

SUSE

libfpm_pb0 (any) libfpm_pb0-debuginfo (any) libospf0 (any) libospf0-debuginfo (any) libospfapiclient0 (any) libospfapiclient0-debuginfo (any) libquagga_pb0 (any) libquagga_pb0-debuginfo (any) libzebra1 (any) libzebra1-debuginfo (any) quagga (any) quagga-debuginfo (any) quagga-debugsource (any) quagga-devel (any)

Уведомление безопасности об уязвимостях SUSE Linux Enterprise Software Development Kit 12-SP3, SUSE Linux Enterprise Software Development Kit 12-SP2, SUSE Linux Enterprise Server 12-SP3, SUSE Linux Enterprise Server 12-SP2, SUSE Linux Enterprise Server for Raspberry Pi 12-SP2

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
SUSE Linux Enterprise Software Development Kit 12-SP3:
aarch64, ppc64le, s390x, x86_64:
quagga-debugsource - 1.1.1-17.3.3
quagga-debuginfo - 1.1.1-17.3.3
quagga-devel - 1.1.1-17.3.3
SUSE Linux Enterprise Software Development Kit 12-SP2:
aarch64, ppc64le, s390x, x86_64:
quagga-debugsource - 1.1.1-17.3.3
quagga-debuginfo - 1.1.1-17.3.3
quagga-devel - 1.1.1-17.3.3
SUSE Linux Enterprise Server 12-SP3:
aarch64, ppc64le, s390x, x86_64:
quagga-debuginfo - 1.1.1-17.3.3
libospf0 - 1.1.1-17.3.3
libfpm_pb0-debuginfo - 1.1.1-17.3.3
libzebra1-debuginfo - 1.1.1-17.3.3
libospfapiclient0-debuginfo - 1.1.1-17.3.3
quagga-debugsource - 1.1.1-17.3.3
libquagga_pb0-debuginfo - 1.1.1-17.3.3
libospfapiclient0 - 1.1.1-17.3.3
libzebra1 - 1.1.1-17.3.3
quagga - 1.1.1-17.3.3
libfpm_pb0 - 1.1.1-17.3.3
libospf0-debuginfo - 1.1.1-17.3.3
libquagga_pb0 - 1.1.1-17.3.3
SUSE Linux Enterprise Server 12-SP2:
aarch64, ppc64le, s390x, x86_64:
quagga-debuginfo - 1.1.1-17.3.3
libospf0 - 1.1.1-17.3.3
libfpm_pb0-debuginfo - 1.1.1-17.3.3
libzebra1-debuginfo - 1.1.1-17.3.3
libospfapiclient0-debuginfo - 1.1.1-17.3.3
quagga-debugsource - 1.1.1-17.3.3
libquagga_pb0-debuginfo - 1.1.1-17.3.3
libospfapiclient0 - 1.1.1-17.3.3
libzebra1 - 1.1.1-17.3.3
quagga - 1.1.1-17.3.3
libfpm_pb0 - 1.1.1-17.3.3
libospf0-debuginfo - 1.1.1-17.3.3
libquagga_pb0 - 1.1.1-17.3.3
SUSE Linux Enterprise Server for Raspberry Pi 12-SP2:
aarch64:
quagga-debuginfo - 1.1.1-17.3.3
libospf0 - 1.1.1-17.3.3
libfpm_pb0-debuginfo - 1.1.1-17.3.3
libzebra1-debuginfo - 1.1.1-17.3.3
libospfapiclient0-debuginfo - 1.1.1-17.3.3
quagga-debugsource - 1.1.1-17.3.3
libquagga_pb0-debuginfo - 1.1.1-17.3.3
libospfapiclient0 - 1.1.1-17.3.3
libzebra1 - 1.1.1-17.3.3
quagga - 1.1.1-17.3.3
libfpm_pb0 - 1.1.1-17.3.3
libospf0-debuginfo - 1.1.1-17.3.3
libquagga_pb0 - 1.1.1-17.3.3

http://lists.opensuse.org/opensuse-security-announce/2017-08/msg00073.html
https://bugzilla.suse.com/1005258
https://bugzilla.suse.com/1021669
https://bugzilla.suse.com/1034273

Источник: CVE
Наименование: CVE-2017-5495
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5495

Источник: CVE
Наименование: CVE-2016-1245
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1245