SUSE-SU-2014:1211-1: moderate: Security update for powerpc-utils

[sle-security-updates at lists.suse.com]

   SUSE Security Update: Security update for powerpc-utils
______________________________________________________________________________

Announcement ID:    SUSE-SU-2014:1211-1
Rating:             moderate
References:         #883174 
Cross-References:   CVE-2014-4040
Affected Products:
                    SUSE Linux Enterprise Server 11 SP3
______________________________________________________________________________

   An update that fixes one vulnerability is now available.

Description:


   The "snap" system information collection tool of the PowerPC Utils package
   collected fstab and yaboot.conf files which might contain passwords.
   (CVE-2014-4040)

   As these files are of interest, we now print a warning that the user of
   the "snap" tool should check if private passwords are in those files.

   Security Issues:

       * CVE-2014-4040
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4040>


Patch Instructions:

   To install this SUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Server 11 SP3:

      zypper in -t patch slessp3-powerpc-utils-9727

   To bring your system up-to-date, use "zypper patch".


Package List:

   - SUSE Linux Enterprise Server 11 SP3 (ppc64):

      powerpc-utils-1.2.16-0.13.1


References:

   http://support.novell.com/security/cve/CVE-2014-4040.html
   https://bugzilla.suse.com/883174
   http://download.suse.com/patch/finder/?keywords=7454d90304ec215b2ef4a7c0690dc9ed