Security update for smt SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:2899-1 Final 1 1 2018-09-27T12:47:25Z current 2018-09-27T12:47:25Z 2018-09-27T12:47:25Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for smt This update for smt to 2.0.34 fixes the following issues: These security issues were fixed: - CVE-2018-12471: Xml External Entity processing in the RegistrationSharing modules allowed to read arbitrary file read (bsc#1103809) - CVE-2018-12470: SQL injection in RegistrationSharing module allows remote attackers to run arbitary SQL statements (bsc#1103810) - CVE-2018-12472: Authentication bypass in sibling check facilitated further attacks on SMT (bsc#1104076) SUSE would like to thank Jake Miller for reporting these issues to us. This non-security issue was fixed: - More verbose incomplete registration logging (bsc#1072921, bsc#1074608) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). slesmtsp3-smt-13798 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20182899-1/ Link for SUSE-SU-2018:2899-1 https://lists.suse.com/pipermail/sle-security-updates/2018-September/004614.html E-Mail link for SUSE-SU-2018:2899-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1072921 SUSE Bug 1072921 https://bugzilla.suse.com/1074608 SUSE Bug 1074608 https://bugzilla.suse.com/1103809 SUSE Bug 1103809 https://bugzilla.suse.com/1103810 SUSE Bug 1103810 https://bugzilla.suse.com/1104076 SUSE Bug 1104076 https://www.suse.com/security/cve/CVE-2018-12470/ SUSE CVE CVE-2018-12470 page https://www.suse.com/security/cve/CVE-2018-12471/ SUSE CVE CVE-2018-12471 page https://www.suse.com/security/cve/CVE-2018-12472/ SUSE CVE CVE-2018-12472 page Subscription Management Tool 11 SP3 res-signingkeys-2.0.34-50.8.1 smt-2.0.34-50.8.1 smt-support-2.0.34-50.8.1 res-signingkeys-2.0.34-50.8.1 as a component of Subscription Management Tool 11 SP3 smt-2.0.34-50.8.1 as a component of Subscription Management Tool 11 SP3 smt-support-2.0.34-50.8.1 as a component of Subscription Management Tool 11 SP3 A SQL Injection in the RegistrationSharing module of SUSE Linux SMT allows remote attackers to cause execute arbitrary SQL statements. Affected releases are SUSE Linux SMT: versions prior to 3.0.37. CVE-2018-12470 Subscription Management Tool 11 SP3:res-signingkeys-2.0.34-50.8.1 Subscription Management Tool 11 SP3:smt-2.0.34-50.8.1 Subscription Management Tool 11 SP3:smt-support-2.0.34-50.8.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182899-1/ https://www.suse.com/security/cve/CVE-2018-12470.html CVE-2018-12470 https://bugzilla.suse.com/1103810 SUSE Bug 1103810 A External Entity Reference ('XXE') vulnerability in SUSE Linux SMT allows remote attackers to read data from the server or cause DoS by referencing blocking elements. Affected releases are SUSE Linux SMT: versions prior to 3.0.37. CVE-2018-12471 Subscription Management Tool 11 SP3:res-signingkeys-2.0.34-50.8.1 Subscription Management Tool 11 SP3:smt-2.0.34-50.8.1 Subscription Management Tool 11 SP3:smt-support-2.0.34-50.8.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182899-1/ https://www.suse.com/security/cve/CVE-2018-12471.html CVE-2018-12471 https://bugzilla.suse.com/1103809 SUSE Bug 1103809 A improper authentication using the HOST header in SUSE Linux SMT allows remote attackers to spoof a sibling server. Affected releases are SUSE Linux SMT: versions prior to 3.0.37. CVE-2018-12472 Subscription Management Tool 11 SP3:res-signingkeys-2.0.34-50.8.1 Subscription Management Tool 11 SP3:smt-2.0.34-50.8.1 Subscription Management Tool 11 SP3:smt-support-2.0.34-50.8.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182899-1/ https://www.suse.com/security/cve/CVE-2018-12472.html CVE-2018-12472 https://bugzilla.suse.com/1104076 SUSE Bug 1104076