Security update for libdb-4_5 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:0409-1 Final 1 1 2018-02-09T11:59:59Z current 2018-02-09T11:59:59Z 2018-02-09T11:59:59Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for libdb-4_5 This update for libdb-4_5 fixes the following issues: - A DB_CONFIG file in the current working directory allowed local users to obtain sensitive information via a symlink attack involving a setgid or setuid application using libdb-4_8. (bsc#1043886) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sdksp4-libdb-4_5-13459,slessp4-libdb-4_5-13459,slestso13-libdb-4_5-13459 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20180409-1/ Link for SUSE-SU-2018:0409-1 https://lists.suse.com/pipermail/sle-security-updates/2018-February/003718.html E-Mail link for SUSE-SU-2018:0409-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1043886 SUSE Bug 1043886 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Studio Onsite 1.3 libdb-4_5-devel-4.5.20-97.5 libdb_java-4_5-4.5.20-97.7 db-doc-4.5.20-97.5 db-utils-4.5.20-97.5 db-utils-doc-4.5.20-97.5 libdb-4_5-4.5.20-97.5 libdb-4_5-32bit-4.5.20-97.5 libdb-4_5-x86-4.5.20-97.5 db-doc-4.5.20-97.5 as a component of SUSE Linux Enterprise Server 11 SP4 db-utils-4.5.20-97.5 as a component of SUSE Linux Enterprise Server 11 SP4 db-utils-doc-4.5.20-97.5 as a component of SUSE Linux Enterprise Server 11 SP4 libdb-4_5-4.5.20-97.5 as a component of SUSE Linux Enterprise Server 11 SP4 libdb-4_5-32bit-4.5.20-97.5 as a component of SUSE Linux Enterprise Server 11 SP4 libdb-4_5-x86-4.5.20-97.5 as a component of SUSE Linux Enterprise Server 11 SP4 db-doc-4.5.20-97.5 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 db-utils-4.5.20-97.5 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 db-utils-doc-4.5.20-97.5 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libdb-4_5-4.5.20-97.5 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libdb-4_5-32bit-4.5.20-97.5 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libdb-4_5-x86-4.5.20-97.5 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libdb-4_5-devel-4.5.20-97.5 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libdb_java-4_5-4.5.20-97.7 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libdb-4_5-devel-4.5.20-97.5 as a component of SUSE Studio Onsite 1.3