Описание
Security update for yast2-multipath
This update for yast2-multipath to version 3.1.9 fixes the following issues:
Security issue fixed:
- CVE-2018-17955: Use random file name instead of static names (bsc#1117592).
Non-security issue fixed:
- Removed calls to /sbin/insserv (bsc#1026027).
Список пакетов
SUSE Linux Enterprise High Availability Extension 12 SP2
yast2-multipath-3.1.9-12.3.45
Ссылки
- Link for SUSE-SU-2021:0182-1
- E-Mail link for SUSE-SU-2021:0182-1
- SUSE Security Ratings
- SUSE Bug 1026027
- SUSE Bug 1117592
- SUSE CVE CVE-2018-17955 page
Описание
In yast2-multipath before version 4.1.1 a static temporary filename allows local attackers to overwrite files on systems without symlink protection
Затронутые продукты
SUSE Linux Enterprise High Availability Extension 12 SP2:yast2-multipath-3.1.9-12.3.45
Ссылки
- CVE-2018-17955
- SUSE Bug 1117592