Security update for cryptctl (important)

2017-07-1421:11:08

lists.opensuse.org

134

0.001 Low

EPSS

Percentile

50.7%

JSON

This update for cryptctl fixes an issue that could have allowed a
malicious administrator to craft RPC requests to overwrite files outside
of key database. (bsc#1041963 / CVE-2017-9270)

OSVersionArchitecturePackageVersionFilename
SUSE Linux Enterprise Server for SAP12.2x86_64cryptctl-debuginfo< 1.2.6-5.3.11cryptctl-debuginfo-1.2.6-5.3.11.x86_64.rpm
SUSE Linux Enterprise Server for SAP12.2ppc64lecryptctl-debuginfo< 1.2.6-5.3.11cryptctl-debuginfo-1.2.6-5.3.11.ppc64le.rpm
SUSE Linux Enterprise Server for SAP12.2x86_64cryptctl< 1.2.6-5.3.11cryptctl-1.2.6-5.3.11.x86_64.rpm
SUSE Linux Enterprise Server for SAP12.2x86_64cryptctl-debugsource< 1.2.6-5.3.11cryptctl-debugsource-1.2.6-5.3.11.x86_64.rpm
SUSE Linux Enterprise Server for SAP12.2ppc64lecryptctl-debugsource< 1.2.6-5.3.11cryptctl-debugsource-1.2.6-5.3.11.ppc64le.rpm
SUSE Linux Enterprise Server for SAP12.2ppc64lecryptctl< 1.2.6-5.3.11cryptctl-1.2.6-5.3.11.ppc64le.rpm

OS	Version	Architecture	Package	Version	Filename
SUSE Linux Enterprise Server for SAP	12.2	x86_64	cryptctl-debuginfo	< 1.2.6-5.3.11	cryptctl-debuginfo-1.2.6-5.3.11.x86_64.rpm
SUSE Linux Enterprise Server for SAP	12.2	ppc64le	cryptctl-debuginfo	< 1.2.6-5.3.11	cryptctl-debuginfo-1.2.6-5.3.11.ppc64le.rpm
SUSE Linux Enterprise Server for SAP	12.2	x86_64	cryptctl	< 1.2.6-5.3.11	cryptctl-1.2.6-5.3.11.x86_64.rpm
SUSE Linux Enterprise Server for SAP	12.2	x86_64	cryptctl-debugsource	< 1.2.6-5.3.11	cryptctl-debugsource-1.2.6-5.3.11.x86_64.rpm
SUSE Linux Enterprise Server for SAP	12.2	ppc64le	cryptctl-debugsource	< 1.2.6-5.3.11	cryptctl-debugsource-1.2.6-5.3.11.ppc64le.rpm
SUSE Linux Enterprise Server for SAP	12.2	ppc64le	cryptctl	< 1.2.6-5.3.11	cryptctl-1.2.6-5.3.11.ppc64le.rpm

References

bugzilla.suse.com/1041963

0.001 Low

EPSS

Percentile

50.7%

JSON

Related for SUSE-SU-2017:1865-1