Recommended update for sblim-sfcb
SUSE Recommended Update: Recommended update for sblim-sfcb
This collective update for Small Footprint CIM Broker
(sblim-sfcb) resolves the following issues:
* Don't log debug/trace messages by default (bnc#767533)
* Prevent crash on early shutdown (while provider
initialization is still in progress) (bnc#770430)
* Don't try to kill the SLP thread if it hasn't been
fully set up yet (bnc#770430)
* Fix insecure LD_LIBRARY_PATH usage in init script
(bnc#770234, CVE-2012-3381)
* Don't replace configuration files when updating
(bnc#744995)
* Keep argvDebug commented out (defaulting to false) in
sfcb.cfg (bnc#782327).
Security Issue reference:
* CVE-2012-3381
>
| Announcement ID: | SUSE-RU-2012:1279-1 |
| Rating: | moderate |
| References: | #744995 #767533 #770234 #770430 #782327 |
| Affected Products: |
An update that solves one vulnerability and has four fixes is now available.
Description:
This collective update for Small Footprint CIM Broker
(sblim-sfcb) resolves the following issues:
* Don't log debug/trace messages by default (bnc#767533)
* Prevent crash on early shutdown (while provider
initialization is still in progress) (bnc#770430)
* Don't try to kill the SLP thread if it hasn't been
fully set up yet (bnc#770430)
* Fix insecure LD_LIBRARY_PATH usage in init script
(bnc#770234, CVE-2012-3381)
* Don't replace configuration files when updating
(bnc#744995)
* Keep argvDebug commented out (defaulting to false) in
sfcb.cfg (bnc#782327).
Security Issue reference:
* CVE-2012-3381
Patch Instructions:
To install this SUSE Recommended Update use YaST online_update.
Alternatively you can run the command listed for your product:
- SUSE Linux Enterprise Server 11 SP2 for VMware:
zypper in -t patch slessp2-sblim-sfcb-6888 - SUSE Linux Enterprise Server 11 SP2:
zypper in -t patch slessp2-sblim-sfcb-6888 - SUSE Linux Enterprise Desktop 11 SP2:
zypper in -t patch sledsp2-sblim-sfcb-6888
To bring your system up-to-date, use "zypper patch".
Package List:
- SUSE Linux Enterprise Server 11 SP2 for VMware (i586 x86_64):
- sblim-sfcb-1.3.11-0.19.1
- SUSE Linux Enterprise Server 11 SP2 (i586 ia64 ppc64 s390x x86_64):
- sblim-sfcb-1.3.11-0.19.1
- SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64):
- sblim-sfcb-1.3.11-0.19.1
References:
- http://support.novell.com/security/cve/CVE-2012-3381.html
- https://bugzilla.novell.com/744995
- https://bugzilla.novell.com/767533
- https://bugzilla.novell.com/770234
- https://bugzilla.novell.com/770430
- https://bugzilla.novell.com/782327
- http://download.suse.com/patch/finder/?keywords=d87398134aa1ab215e01c15fb0a0b2cd