Security update for POS_Image3, POS_Server3 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2016:2627-1 Final 1 1 2016-10-25T14:34:55Z current 2016-10-25T14:34:55Z 2016-10-25T14:34:55Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for POS_Image3, POS_Server3 This update provides POS_Image3 and POS_Server3 version 3.5.5, which bring many fixes and enhancements: - Fixed potential security issues (bsc#946740) * use three argument perl open function consistently * use array in perl system call everywhere * use preferably perl built-in functions instead of external shell commands * improved validation of uploaded files from terminals to BS * improved runcmd code used for calling external commands - Auto-registration should not start before dhcpd is ready (bsc#1003383) - Fixed handling of HTTP redirects in registerImages (bsc#1003376) - Fixed handling x86_64 images (bsc#1003374) - Do not limit number of entries for BS LDAP (bsc#985979) - Increase max wait time to 10mins (bsc#989247) - Infer service IP when only one BS NIC is specified in LDAP (bsc#927232) - Fixed regression in directly referenced image in scWorkstation object (bsc#979925) - Fixed handling deltas of compressed images in registerImages (bsc#887607) - Fixed posleases to handle stop event correctly (bsc#883017) - Fixed save_poslogs utility to dump LDAP content on BS (bsc#890002) - Do not configure authoritative DNS outside netmask (bsc#889665) - Add ipHostNumber field to services in posAdmin-GUI (bsc#944292) - Fixed multival modification in posAdmin (bsc#840279) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sleposp3-POS_Image3-12817 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2016/suse-su-20162627-1/ Link for SUSE-SU-2016:2627-1 https://lists.suse.com/pipermail/sle-security-updates/2016-October/002351.html E-Mail link for SUSE-SU-2016:2627-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1003374 SUSE Bug 1003374 https://bugzilla.suse.com/1003376 SUSE Bug 1003376 https://bugzilla.suse.com/1003383 SUSE Bug 1003383 https://bugzilla.suse.com/840279 SUSE Bug 840279 https://bugzilla.suse.com/883017 SUSE Bug 883017 https://bugzilla.suse.com/887607 SUSE Bug 887607 https://bugzilla.suse.com/889665 SUSE Bug 889665 https://bugzilla.suse.com/890002 SUSE Bug 890002 https://bugzilla.suse.com/927232 SUSE Bug 927232 https://bugzilla.suse.com/944292 SUSE Bug 944292 https://bugzilla.suse.com/946740 SUSE Bug 946740 https://bugzilla.suse.com/979925 SUSE Bug 979925 https://bugzilla.suse.com/985979 SUSE Bug 985979 https://bugzilla.suse.com/989247 SUSE Bug 989247 SUSE Linux Enterprise Point of Sale 11 SP3 POS_Image-Minimal3-3.4.0-18.1 POS_Image-Netboot-hooks-3.4.0-18.1 POS_Image-Tools-3.4.0-18.1 POS_Image3-3.5.5-18.1 POS_Migration-3.5.5-18.1 POS_Server-Admin3-3.5.5-18.1 POS_Server-AdminGUI-3.5.5-18.1 POS_Server-AdminTools3-3.5.5-18.1 POS_Server-BranchTools3-3.5.5-18.1 POS_Server-Modules3-3.5.5-18.1 POS_Server3-3.5.5-18.1 admind-1.9-18.1 admind-client-1.9-18.1 posbios-1.0-18.1 POS_Image-Minimal3-3.4.0-18.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 POS_Image-Netboot-hooks-3.4.0-18.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 POS_Image-Tools-3.4.0-18.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 POS_Image3-3.5.5-18.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 POS_Migration-3.5.5-18.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 POS_Server-Admin3-3.5.5-18.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 POS_Server-AdminGUI-3.5.5-18.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 POS_Server-AdminTools3-3.5.5-18.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 POS_Server-BranchTools3-3.5.5-18.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 POS_Server-Modules3-3.5.5-18.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 POS_Server3-3.5.5-18.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 admind-1.9-18.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 admind-client-1.9-18.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 posbios-1.0-18.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3