Security update for tcmu-runner SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2017:2109-1 Final 1 1 2017-08-09T07:46:32Z current 2017-08-09T07:46:32Z 2017-08-09T07:46:32Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for tcmu-runner This update for tcmu-runner fixes the following issues: - qcow handler opens up an information leak via the CheckConfig D-Bus method (bsc#1049491) - glfs handler allows local DoS via crafted CheckConfig strings (bsc#1049485) - UnregisterHandler dbus method in tcmu-runner daemon for non-existing handler causes denial of service (bsc#1049488) - UnregisterHandler D-Bus method in tcmu-runner daemon for internal handler causes denial of service (bsc#1049489) - Memory leaks can be triggered in tcmu-runner daemon by calling D-Bus method for (Un)RegisterHandler (bsc#1049490) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-SDK-12-SP3-2017-1311,SUSE-SLE-SERVER-12-SP3-2017-1311 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2017/suse-su-20172109-1/ Link for SUSE-SU-2017:2109-1 https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00030.html E-Mail link for SUSE-SU-2017:2109-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1049485 SUSE Bug 1049485 https://bugzilla.suse.com/1049488 SUSE Bug 1049488 https://bugzilla.suse.com/1049489 SUSE Bug 1049489 https://bugzilla.suse.com/1049490 SUSE Bug 1049490 https://bugzilla.suse.com/1049491 SUSE Bug 1049491 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 tcmu-runner-devel-1.2.0-2.3.1 libtcmu1-1.2.0-2.3.1 tcmu-runner-1.2.0-2.3.1 libtcmu1-1.2.0-2.3.1 as a component of SUSE Linux Enterprise Server 12 SP3 tcmu-runner-1.2.0-2.3.1 as a component of SUSE Linux Enterprise Server 12 SP3 libtcmu1-1.2.0-2.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 tcmu-runner-1.2.0-2.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 tcmu-runner-devel-1.2.0-2.3.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3