SUSE-SU-2016:2627-1
Security update for POS_Image3, POS_Server3
No scoreFix available
This update provides POS_Image3 and POS_Server3 version 3.5.5, which bring many fixes and enhancements:
- Fixed potential security issues (bsc#946740)
- use three argument perl open function consistently
- use array in perl system call everywhere
- use preferably perl built-in functions instead of external shell commands
- improved validation of uploaded files from terminals to BS
- improved runcmd code used for calling external commands
- Auto-registration should not start before dhcpd is ready (bsc#1003383)
- Fixed handling of HTTP redirects in registerImages (bsc#1003376)
- Fixed handling x86_64 images (bsc#1003374)
- Do not limit number of entries for BS LDAP (bsc#985979)
- Increase max wait time to 10mins (bsc#989247)
- Infer service IP when only one BS NIC is specified in LDAP (bsc#927232)
- Fixed regression in directly referenced image in scWorkstation object (bsc#979925)
- Fixed handling deltas of compressed images in registerImages (bsc#887607)
- Fixed posleases to handle stop event correctly (bsc#883017)
- Fixed save_poslogs utility to dump LDAP content on BS (bsc#890002)
- Do not configure authoritative DNS outside netmask (bsc#889665)
- Add ipHostNumber field to services in posAdmin-GUI (bsc#944292)
- Fixed multival modification in posAdmin (bsc#840279)
What each source reports
OSVNo score
Security update for POS_Image3, POS_Server3
This update provides POS_Image3 and POS_Server3 version 3.5.5, which bring many fixes and enhancements:
- Fixed potential security issues (bsc#946740)
- use three argument perl open function consistently
- use array in perl system call everywhere
- use preferably perl built-in functions instead of external shell commands
- improved validation of uploaded files from terminals to BS
- improved runcmd code used for calling external commands
- Auto-registration should not start before dhcpd is ready (bsc#1003383)
- Fixed handling of HTTP redirects in registerImages (bsc#1003376)
- Fixed handling x86_64 images (bsc#1003374)
- Do not limit number of entries for BS LDAP (bsc#985979)
- Increase max wait time to 10mins (bsc#989247)
- Infer service IP when only one BS NIC is specified in LDAP (bsc#927232)
- Fixed regression in directly referenced image in scWorkstation object (bsc#979925)
- Fixed handling deltas of compressed images in registerImages (bsc#887607)
- Fixed posleases to handle stop event correctly (bsc#883017)
- Fixed save_poslogs utility to dump LDAP content on BS (bsc#890002)
- Do not configure authoritative DNS outside netmask (bsc#889665)
- Add ipHostNumber field to services in posAdmin-GUI (bsc#944292)
- Fixed multival modification in posAdmin (bsc#840279)
- Record
SUSE-SU-2016:2627-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
POS_Image3SUSE:Linux Enterprise Point of Sale 11 SP3 | before 3.5.5-18.1 | 3.5.5-18.1 |
POS_Server3SUSE:Linux Enterprise Point of Sale 11 SP3 | before 3.5.5-18.1 | 3.5.5-18.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
SUSE-SU-2016:2627-1 is a vulnerability with no CVSS score yet in POS_Image3, published October 25, 2016. No source lists public exploit code. Fixed in POS_Image3 3.5.5-18.1.