Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2020:0578-1

Опубликовано: 03 мар. 2020
Источник: suse-cvrf

Описание

Security update for yast2-rmt

This update for yast2-rmt to version 1.3.0 fixes the following issues:

Security issue fixed:

  • CVE-2018-20105: Fixed an exposure of the CA private key passphrase in the log file (bsc#1119835).

Non-security issue fixed:

  • Add support for forwarding registration data from RMT to SCC

Список пакетов

SUSE Linux Enterprise Module for Server Applications 15 SP1
yast2-rmt-1.3.0-3.5.1

Ссылки

Описание

A Inclusion of Sensitive Information in Log Files vulnerability in yast2-rmt of SUSE Linux Enterprise Server 15; openSUSE Leap allows local attackers to learn the password if they can access the log file. This issue affects: SUSE Linux Enterprise Server 15 yast2-rmt versions prior to 1.2.2. openSUSE Leap yast2-rmt versions prior to 1.2.2.

Затронутые продукты
SUSE Linux Enterprise Module for Server Applications 15 SP1:yast2-rmt-1.3.0-3.5.1
Ссылки