Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2020:3231-1

Опубликовано: 06 нояб. 2020
Источник: suse-cvrf

Описание

Security update for yast2-multipath

This update for yast2-multipath to version 3.2.2 fixes the following issues:

  • CVE-2018-17955: Use random file name instead of static names (bsc#1117592).

Список пакетов

SUSE Linux Enterprise High Availability Extension 12 SP3
yast2-multipath-3.2.2-3.3.30
SUSE Linux Enterprise High Availability Extension 12 SP4
yast2-multipath-3.2.2-3.3.30
SUSE Linux Enterprise High Availability Extension 12 SP5
yast2-multipath-3.2.2-3.3.30

Ссылки

Описание

In yast2-multipath before version 4.1.1 a static temporary filename allows local attackers to overwrite files on systems without symlink protection

Затронутые продукты
SUSE Linux Enterprise High Availability Extension 12 SP3:yast2-multipath-3.2.2-3.3.30
SUSE Linux Enterprise High Availability Extension 12 SP4:yast2-multipath-3.2.2-3.3.30
SUSE Linux Enterprise High Availability Extension 12 SP5:yast2-multipath-3.2.2-3.3.30
Ссылки