Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2020:0320-1

Опубликовано: 08 мар. 2020
Источник: suse-cvrf

Описание

Security update for yast2-rmt

This update for yast2-rmt to version 1.3.0 fixes the following issues:

Security issue fixed:

  • CVE-2018-20105: Fixed an exposure of the CA private key passphrase in the log file (bsc#1119835).

Non-security issue fixed:

  • Add support for forwarding registration data from RMT to SCC

This update was imported from the SUSE:SLE-15-SP1:Update update project.

Список пакетов

openSUSE Leap 15.1
yast2-rmt-1.3.0-lp151.2.6.1

Ссылки

Описание

A Inclusion of Sensitive Information in Log Files vulnerability in yast2-rmt of SUSE Linux Enterprise Server 15; openSUSE Leap allows local attackers to learn the password if they can access the log file. This issue affects: SUSE Linux Enterprise Server 15 yast2-rmt versions prior to 1.2.2. openSUSE Leap yast2-rmt versions prior to 1.2.2.

Затронутые продукты
openSUSE Leap 15.1:yast2-rmt-1.3.0-lp151.2.6.1
Ссылки