Security update for powerpc-utils
SUSE Security Update: Security update for powerpc-utils
The "snap" system information collection tool of the PowerPC Utils package
collected fstab and yaboot.conf files which might contain passwords.
(CVE-2014-4040)
As these files are of interest, we now print a warning that the user of
the "snap" tool should check if private passwords are in those files.
Security Issues:
* CVE-2014-4040
| Announcement ID: | SUSE-SU-2014:1211-1 |
| Rating: | moderate |
| References: | #883174 |
| Affected Products: |
An update that fixes one vulnerability is now available.
Description:
The "snap" system information collection tool of the PowerPC Utils package
collected fstab and yaboot.conf files which might contain passwords.
(CVE-2014-4040)
As these files are of interest, we now print a warning that the user of
the "snap" tool should check if private passwords are in those files.
Security Issues:
* CVE-2014-4040
Patch Instructions:
To install this SUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product:
- SUSE Linux Enterprise Server 11 SP3:
zypper in -t patch slessp3-powerpc-utils-9727
To bring your system up-to-date, use "zypper patch".
Package List:
- SUSE Linux Enterprise Server 11 SP3 (ppc64):
- powerpc-utils-1.2.16-0.13.1
References:
- http://support.novell.com/security/cve/CVE-2014-4040.html
- https://bugzilla.suse.com/883174
- http://download.suse.com/patch/finder/?keywords=7454d90304ec215b2ef4a7c0690dc9ed