FlawAtlas
Search the atlas
SUSE-SU-2017:0475-1 Not scored

Security update for susestudio

This update provides SUSE Studio Runner 1.3.14, which brings fixes for the following issues: - bsc#968797: 11 SP3 appliance gets invalid distribution upgrade from SLMS. - bsc#947225: Second build of appliance will not register to SLMS, wrong product name. - bsc#983404: UEFI boot missing for SLE11 SP4. - bsc#972406: Kiwi export config.sh script has /build-custom out of order. - bsc#981095: Add user 'ldap' to default_users list for assigning owners for overlay files. - bsc#972425: Runlevel 3 is being ignored in appliance configuration. - bsc#983999: SLES 12 appliance build does not include gpg keys from base product. - bsc#979110: SLES 12 will not build for EC2. - bsc#929102: Plaintext Password Local Disclosure in rubygem-rest-client. (CVE-2015-3448) - bsc#963741: Security fixes for Rails v3.2.22. (CVE-2015-7576, CVE-2015-7577, CVE-2016-0751, CVE-2016-0752)

Exploit probability Not scored
Published February 16, 2017
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Studio Onsite 1.3 libjansson
SUSE:Studio Onsite 1.3 qemu-ext2
SUSE:Studio Onsite 1.3 rubygem-bundler19
SUSE:Studio Onsite 1.3 studio-help
SUSE:Studio Onsite 1.3 susestudio
SUSE:Studio Onsite Runner 1.3 libjansson
SUSE:Studio Onsite Runner 1.3 qemu-ext2
SUSE:Studio Onsite Runner 1.3 rubygem-bundler19
SUSE:Studio Onsite Runner 1.3 studio-help
SUSE:Studio Onsite Runner 1.3 susestudio

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2017:0475-1

This update provides SUSE Studio Runner 1.3.14, which brings fixes for the following issues: - bsc#968797: 11 SP3 appliance gets invalid distribution upgrade from SLMS. - bsc#947225: Second build of appliance will not register to SLMS, wrong product name. - bsc#983404: UEFI boot missing for SLE11 SP4. - bsc#972406: Kiwi export config.sh script has /build-custom out of order. - bsc#981095: Add user 'ldap' to default_users list for assigning owners for overlay files. - bsc#972425: Runlevel 3 is being ignored in appliance configuration. - bsc#983999: SLES 12 appliance build does not include gpg keys from base product. - bsc#979110: SLES 12 will not build for EC2. - bsc#929102: Plaintext Password Local Disclosure in rubygem-rest-client. (CVE-2015-3448) - bsc#963741: Security fixes for Rails v3.2.22. (CVE-2015-7576, CVE-2015-7577, CVE-2016-0751, CVE-2016-0752)

View original source

05 / REFERENCES

Further evidence