{"id":"SUSE-SU-2016:2627-1","aliases":[],"status":"published","title":"Security update for POS_Image3, POS_Server3","description":"This update provides POS_Image3 and POS_Server3 version 3.5.5, which bring many\nfixes and enhancements:\n\n- Fixed potential security issues (bsc#946740)\n  * use three argument perl open function consistently\n  * use array in perl system call everywhere\n  * use preferably perl built-in functions instead of external shell commands\n  * improved validation of uploaded files from terminals to BS\n  * improved runcmd code used for calling external commands\n- Auto-registration should not start before dhcpd is ready (bsc#1003383)\n- Fixed handling of HTTP redirects in registerImages (bsc#1003376)\n- Fixed handling x86_64 images (bsc#1003374)\n- Do not limit number of entries for BS LDAP (bsc#985979)\n- Increase max wait time to 10mins (bsc#989247)\n- Infer service IP when only one BS NIC is specified in LDAP (bsc#927232)\n- Fixed regression in directly referenced image in scWorkstation object (bsc#979925)\n- Fixed handling deltas of compressed images in registerImages (bsc#887607)\n- Fixed posleases to handle stop event correctly (bsc#883017)\n- Fixed save_poslogs utility to dump LDAP content on BS (bsc#890002)\n- Do not configure authoritative DNS outside netmask (bsc#889665)\n- Add ipHostNumber field to services in posAdmin-GUI (bsc#944292)\n- Fixed multival modification in posAdmin (bsc#840279)","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2016-10-25T14:34:55Z","modified":"2016-10-25T14:34:55Z","fixes":[{"ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"POS_Image3","fixed_in":["3.5.5-18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"POS_Server3","fixed_in":["3.5.5-18.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"POS_Image3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.5-18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"POS_Server3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.5-18.1"}]}]}],"references":[{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162627-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1003374","tags":["report"]},{"url":"https://bugzilla.suse.com/1003376","tags":["report"]},{"url":"https://bugzilla.suse.com/1003383","tags":["report"]},{"url":"https://bugzilla.suse.com/840279","tags":["report"]},{"url":"https://bugzilla.suse.com/883017","tags":["report"]},{"url":"https://bugzilla.suse.com/887607","tags":["report"]},{"url":"https://bugzilla.suse.com/889665","tags":["report"]},{"url":"https://bugzilla.suse.com/890002","tags":["report"]},{"url":"https://bugzilla.suse.com/927232","tags":["report"]},{"url":"https://bugzilla.suse.com/944292","tags":["report"]},{"url":"https://bugzilla.suse.com/946740","tags":["report"]},{"url":"https://bugzilla.suse.com/979925","tags":["report"]},{"url":"https://bugzilla.suse.com/985979","tags":["report"]},{"url":"https://bugzilla.suse.com/989247","tags":["report"]}],"sources":{"osv":[{"id":"SUSE-SU-2016:2627-1","title":"Security update for POS_Image3, POS_Server3","description":"\nThis update provides POS_Image3 and POS_Server3 version 3.5.5, which bring many\nfixes and enhancements:\n\n- Fixed potential security issues (bsc#946740)\n  * use three argument perl open function consistently\n  * use array in perl system call everywhere\n  * use preferably perl built-in functions instead of external shell commands\n  * improved validation of uploaded files from terminals to BS\n  * improved runcmd code used for calling external commands\n- Auto-registration should not start before dhcpd is ready (bsc#1003383)\n- Fixed handling of HTTP redirects in registerImages (bsc#1003376)\n- Fixed handling x86_64 images (bsc#1003374)\n- Do not limit number of entries for BS LDAP (bsc#985979)\n- Increase max wait time to 10mins (bsc#989247)\n- Infer service IP when only one BS NIC is specified in LDAP (bsc#927232)\n- Fixed regression in directly referenced image in scWorkstation object (bsc#979925)\n- Fixed handling deltas of compressed images in registerImages (bsc#887607)\n- Fixed posleases to handle stop event correctly (bsc#883017)\n- Fixed save_poslogs utility to dump LDAP content on BS (bsc#890002)\n- Do not configure authoritative DNS outside netmask (bsc#889665)\n- Add ipHostNumber field to services in posAdmin-GUI (bsc#944292)\n- Fixed multival modification in posAdmin (bsc#840279)\n","status":"published","published":"2016-10-25T14:34:55Z","modified":"2016-10-25T14:34:55Z","updated_at":"2026-11-02T15:53:43.438985Z"}]}}