Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2020:0253-1

Опубликовано: 27 фев. 2020
Источник: suse-cvrf

Описание

Security update for yast2-rmt

This update for yast2-rmt fixes the following issues:

yast2-rmt was updated to release version 1.2.2:

  • CVE-2018-20105: Pass SSL password to Cheetah CLI interface securely (boo#1119835)

Список пакетов

openSUSE Leap 15.1
yast2-rmt-1.2.2-lp151.2.3.1

Ссылки

Описание

A Inclusion of Sensitive Information in Log Files vulnerability in yast2-rmt of SUSE Linux Enterprise Server 15; openSUSE Leap allows local attackers to learn the password if they can access the log file. This issue affects: SUSE Linux Enterprise Server 15 yast2-rmt versions prior to 1.2.2. openSUSE Leap yast2-rmt versions prior to 1.2.2.

Затронутые продукты
openSUSE Leap 15.1:yast2-rmt-1.2.2-lp151.2.3.1
Ссылки