Уведомление безопасности SUSE-SU-2018:3332-1

Уровень опасности

Высокая (7.5)

Оценка CVSS

(AV:N/AC:L/Au:N/C:P/I:P/A:P)

Производитель ПО

SUSE

Наименование ПО

xen (any) xen-debugsource (any) xen-doc-html (any) xen-libs (any) xen-libs-32bit (any) xen-libs-debuginfo (any) xen-libs-debuginfo-32bit (any) xen-tools (any) xen-tools-debuginfo (any) xen-tools-domU (any) xen-tools-domU-debuginfo (any)

Описание

Уведомление безопасности об уязвимостях SUSE Linux Enterprise Server 12-SP2-BCL, SUSE OpenStack Cloud 7, SUSE Linux Enterprise Server for SAP 12-SP2, SUSE Linux Enterprise Server 12-SP2-LTSS, SUSE Enterprise Storage 4

Как исправить

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
SUSE Linux Enterprise Server 12-SP2-BCL:
x86_64:
xen-libs-32bit - 4.7.6_05-43.42.1
xen-tools - 4.7.6_05-43.42.1
xen-libs - 4.7.6_05-43.42.1
xen - 4.7.6_05-43.42.1
xen-debugsource - 4.7.6_05-43.42.1
xen-tools-domU-debuginfo - 4.7.6_05-43.42.1
xen-libs-debuginfo-32bit - 4.7.6_05-43.42.1
xen-tools-domU - 4.7.6_05-43.42.1
xen-tools-debuginfo - 4.7.6_05-43.42.1
xen-libs-debuginfo - 4.7.6_05-43.42.1
xen-doc-html - 4.7.6_05-43.42.1
SUSE OpenStack Cloud 7:
x86_64:
xen-libs-32bit - 4.7.6_05-43.42.1
xen-tools - 4.7.6_05-43.42.1
xen-libs - 4.7.6_05-43.42.1
xen - 4.7.6_05-43.42.1
xen-debugsource - 4.7.6_05-43.42.1
xen-tools-domU-debuginfo - 4.7.6_05-43.42.1
xen-libs-debuginfo-32bit - 4.7.6_05-43.42.1
xen-tools-domU - 4.7.6_05-43.42.1
xen-tools-debuginfo - 4.7.6_05-43.42.1
xen-libs-debuginfo - 4.7.6_05-43.42.1
xen-doc-html - 4.7.6_05-43.42.1
SUSE Linux Enterprise Server for SAP 12-SP2:
x86_64:
xen-libs-32bit - 4.7.6_05-43.42.1
xen-tools - 4.7.6_05-43.42.1
xen-libs - 4.7.6_05-43.42.1
xen - 4.7.6_05-43.42.1
xen-debugsource - 4.7.6_05-43.42.1
xen-tools-domU-debuginfo - 4.7.6_05-43.42.1
xen-libs-debuginfo-32bit - 4.7.6_05-43.42.1
xen-tools-domU - 4.7.6_05-43.42.1
xen-tools-debuginfo - 4.7.6_05-43.42.1
xen-libs-debuginfo - 4.7.6_05-43.42.1
xen-doc-html - 4.7.6_05-43.42.1
SUSE Linux Enterprise Server 12-SP2-LTSS:
x86_64:
xen-libs-32bit - 4.7.6_05-43.42.1
xen-tools - 4.7.6_05-43.42.1
xen-libs - 4.7.6_05-43.42.1
xen - 4.7.6_05-43.42.1
xen-debugsource - 4.7.6_05-43.42.1
xen-tools-domU-debuginfo - 4.7.6_05-43.42.1
xen-libs-debuginfo-32bit - 4.7.6_05-43.42.1
xen-tools-domU - 4.7.6_05-43.42.1
xen-tools-debuginfo - 4.7.6_05-43.42.1
xen-libs-debuginfo - 4.7.6_05-43.42.1
xen-doc-html - 4.7.6_05-43.42.1
SUSE Enterprise Storage 4:
x86_64:
xen-libs-32bit - 4.7.6_05-43.42.1
xen-tools - 4.7.6_05-43.42.1
xen-libs - 4.7.6_05-43.42.1
xen - 4.7.6_05-43.42.1
xen-debugsource - 4.7.6_05-43.42.1
xen-tools-domU-debuginfo - 4.7.6_05-43.42.1
xen-libs-debuginfo-32bit - 4.7.6_05-43.42.1
xen-tools-domU - 4.7.6_05-43.42.1
xen-tools-debuginfo - 4.7.6_05-43.42.1
xen-libs-debuginfo - 4.7.6_05-43.42.1
xen-doc-html - 4.7.6_05-43.42.1

Ссылки

http://lists.suse.com/pipermail/sle-security-updates/2018-October/004769.html
https://bugzilla.suse.com/1094508
https://bugzilla.suse.com/1103276
https://bugzilla.suse.com/1111014

Источник: CVE
Наименование: CVE-2018-17963
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17963

Источник: CVE
Наименование: CVE-2018-15468
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15468

Назад к списку уязвимостей

Уведомление безопасности SUSE-SU-2018:3332-1

Карточка уязвимости

Характеристики уязвимости