Уведомление безопасности SUSE-SU-2017:2747-1

Критичная (9.0)

(AV:N/AC:L/Au:S/C:C/I:C/A:C)

SUSE

git (any) git-arch (any) git-core (any) git-core-debuginfo (any) git-cvs (any) git-daemon (any) git-daemon-debuginfo (any) git-debugsource (any) git-doc (any) git-email (any) git-gui (any) gitk (any) git-svn (any) git-svn-debuginfo (any) git-web (any)

Уведомление безопасности об уязвимостях SUSE Linux Enterprise Software Development Kit 12-SP3, SUSE Linux Enterprise Software Development Kit 12-SP2, SUSE OpenStack Cloud 6, SUSE Container as a Service Platform ALL, SUSE Linux Enterprise Server 12-SP2, OpenStack Cloud Magnum Orchestration 7, SUSE Linux Enterprise Server 12-SP1-LTSS, SUSE Linux Enterprise Server for SAP 12-SP1, SUSE Linux Enterprise Server 12-SP3, SUSE Linux Enterprise Server for Raspberry Pi 12-SP2

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
SUSE Linux Enterprise Software Development Kit 12-SP3:
aarch64, ppc64le, s390x, x86_64:
git-arch - 2.12.3-27.9.1
git-daemon - 2.12.3-27.9.1
git-core - 2.12.3-27.9.1
gitk - 2.12.3-27.9.1
git-svn - 2.12.3-27.9.1
git-svn-debuginfo - 2.12.3-27.9.1
git-daemon-debuginfo - 2.12.3-27.9.1
git-debugsource - 2.12.3-27.9.1
git - 2.12.3-27.9.1
git-web - 2.12.3-27.9.1
git-core-debuginfo - 2.12.3-27.9.1
git-email - 2.12.3-27.9.1
git-gui - 2.12.3-27.9.1
git-cvs - 2.12.3-27.9.1
SUSE Linux Enterprise Software Development Kit 12-SP3:
noarch:
git-doc - 2.12.3-27.9.1
SUSE Linux Enterprise Software Development Kit 12-SP2:
aarch64, ppc64le, s390x, x86_64:
git-arch - 2.12.3-27.9.1
git-daemon - 2.12.3-27.9.1
git-core - 2.12.3-27.9.1
gitk - 2.12.3-27.9.1
git-svn - 2.12.3-27.9.1
git-svn-debuginfo - 2.12.3-27.9.1
git-daemon-debuginfo - 2.12.3-27.9.1
git-debugsource - 2.12.3-27.9.1
git - 2.12.3-27.9.1
git-web - 2.12.3-27.9.1
git-core-debuginfo - 2.12.3-27.9.1
git-email - 2.12.3-27.9.1
git-gui - 2.12.3-27.9.1
git-cvs - 2.12.3-27.9.1
SUSE Linux Enterprise Software Development Kit 12-SP2:
noarch:
git-doc - 2.12.3-27.9.1
SUSE OpenStack Cloud 6:
x86_64:
git-core-debuginfo - 2.12.3-27.9.1
git-debugsource - 2.12.3-27.9.1
git-core - 2.12.3-27.9.1
SUSE OpenStack Cloud 6:
noarch:
git-doc - 2.12.3-27.9.1
SUSE Container as a Service Platform ALL:
x86_64:
git-core-debuginfo - 2.12.3-27.9.1
git-debugsource - 2.12.3-27.9.1
git-core - 2.12.3-27.9.1
SUSE Linux Enterprise Server 12-SP2:
aarch64, ppc64le, s390x, x86_64:
git-core-debuginfo - 2.12.3-27.9.1
git-debugsource - 2.12.3-27.9.1
git-core - 2.12.3-27.9.1
SUSE Linux Enterprise Server 12-SP2:
noarch:
git-doc - 2.12.3-27.9.1
OpenStack Cloud Magnum Orchestration 7:
x86_64:
git-core-debuginfo - 2.12.3-27.9.1
git-debugsource - 2.12.3-27.9.1
git-core - 2.12.3-27.9.1
SUSE Linux Enterprise Server 12-SP1-LTSS:
ppc64le, s390x, x86_64:
git-core-debuginfo - 2.12.3-27.9.1
git-debugsource - 2.12.3-27.9.1
git-core - 2.12.3-27.9.1
SUSE Linux Enterprise Server 12-SP1-LTSS:
noarch:
git-doc - 2.12.3-27.9.1
SUSE Linux Enterprise Server for SAP 12-SP1:
ppc64le, x86_64:
git-core-debuginfo - 2.12.3-27.9.1
git-debugsource - 2.12.3-27.9.1
git-core - 2.12.3-27.9.1
SUSE Linux Enterprise Server for SAP 12-SP1:
noarch:
git-doc - 2.12.3-27.9.1
SUSE Linux Enterprise Server 12-SP3:
aarch64, ppc64le, s390x, x86_64:
git-core-debuginfo - 2.12.3-27.9.1
git-debugsource - 2.12.3-27.9.1
git-core - 2.12.3-27.9.1
SUSE Linux Enterprise Server for Raspberry Pi 12-SP2:
aarch64:
git-core-debuginfo - 2.12.3-27.9.1
git-debugsource - 2.12.3-27.9.1
git-core - 2.12.3-27.9.1
SUSE Linux Enterprise Server for Raspberry Pi 12-SP2:
noarch:
git-doc - 2.12.3-27.9.1

http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00021.html
https://bugzilla.suse.com/1061041

Источник: CVE
Наименование: CVE-2017-14867
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14867