Описание
Security update for bubblewrap
This update for bubblewrap fixes the following issues:
Security issue fixed:
- CVE-2019-12439: Fixed insecure use of /tmp (bsc#1136958).
This update was imported from the SUSE:SLE-15:Update update project.
Список пакетов
openSUSE Leap 15.0
bubblewrap-0.2.0-lp150.2.3.1
Ссылки
- E-Mail link for openSUSE-SU-2019:1721-1
- SUSE Security Ratings
- SUSE Bug 1136958
- SUSE CVE CVE-2019-12439 page
Описание
bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point. In some particular configurations (related to XDG_RUNTIME_DIR), a local attacker may abuse this flaw to prevent other users from executing bubblewrap or potentially execute code.
Затронутые продукты
openSUSE Leap 15.0:bubblewrap-0.2.0-lp150.2.3.1
Ссылки
- CVE-2019-12439
- SUSE Bug 1136958