You are here
Home > Preporuke > Sigurnosni propusti programskog paketa ppc64-diag

Sigurnosni propusti programskog paketa ppc64-diag

  • Detalji os-a: LSU
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LSU

SUSE Security Update: Security update for ppc64-diag

Announcement ID: SUSE-SU-2014:0928-1
Rating: important
References: #882667
Cross-References: CVE-2014-4038 CVE-2014-4039
Affected Products:
SUSE Linux Enterprise Server 11 SP3

An update that fixes two vulnerabilities is now available.


ppc64-diag has been updated to prevent the usage of predictable filenames
in /tmp in various scripts and daemons (CVE-2014-4038) Also the snapshot
tarball was previously generated world readable, which could have leaked
sensible information, which is only visible to root, to all users. It is
now readable for root only (CVE-2014-4039).

Security Issues:

* CVE-2014-4038
* CVE-2014-4039

Patch Instructions:

To install this SUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product:

– SUSE Linux Enterprise Server 11 SP3:

zypper in -t patch slessp3-ppc64-diag-9533

To bring your system up-to-date, use “zypper patch”.

Package List:

– SUSE Linux Enterprise Server 11 SP3 (ppc64):



To unsubscribe, e-mail:
For additional commands, e-mail:

AutorTomislav Protega
Cert idNCERT-REF-2014-07-0023-ADV
CveCVE-2014-4038 CVE-2014-4039
ID izvornikaSUSE-SU-2014:0928-1
More in Preporuke
Višestruke ranjivosti programskog paketa oxide-qt

Otkrivene su višestruke ranjivosti programskog paketa oxide-qt za Ubuntu 14.04 LTS. Ranjivosti zahavćaju razne dijelove paketa, a mogle su biti...