SUSE-SU-2015:1300-1: moderate: Security update for novnc
sle-updates at lists.suse.com
sle-updates at lists.suse.com
Mon Jul 27 14:08:21 MDT 2015
SUSE Security Update: Security update for novnc
______________________________________________________________________________
Announcement ID: SUSE-SU-2015:1300-1
Rating: moderate
References: #922233
Cross-References: CVE-2013-7436
Affected Products:
SUSE Cloud 5
______________________________________________________________________________
An update that fixes one vulnerability is now available.
Description:
novnc was updated to fix a session hijacking problem through insecurely
set session token cookies (bnc#922233, CVE-2013-7436).
Security Issues:
* CVE-2013-7436
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7436>
Contraindications:
Patch Instructions:
To install this SUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product:
- SUSE Cloud 5:
zypper in -t patch sleclo50sp3-novnc=10751
To bring your system up-to-date, use "zypper patch".
Package List:
- SUSE Cloud 5 (x86_64):
novnc-0.4-0.13.1
References:
https://www.suse.com/security/cve/CVE-2013-7436.html
https://bugzilla.suse.com/922233
https://download.suse.com/patch/finder/?keywords=06710141fb88765b2e1c8ede5db148e8
More information about the sle-updates
mailing list