Описание
Security update for exim
This update for exim fixes the following issues:
- CVE-2020-8015: Fixed a local privilege escalation from user mail to root (boo#1154183).
Список пакетов
openSUSE Leap 15.1
exim-4.88-lp151.4.12.1
eximon-4.88-lp151.4.12.1
eximstats-html-4.88-lp151.4.12.1
Ссылки
- E-Mail link for openSUSE-SU-2020:0491-1
- SUSE Security Ratings
- SUSE Bug 1154183
- SUSE Bug 1160726
- SUSE CVE CVE-2020-8015 page
Описание
A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of exim in openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: openSUSE Factory exim versions prior to 4.93.0.4-3.1.
Затронутые продукты
openSUSE Leap 15.1:exim-4.88-lp151.4.12.1
openSUSE Leap 15.1:eximon-4.88-lp151.4.12.1
openSUSE Leap 15.1:eximstats-html-4.88-lp151.4.12.1
Ссылки
- CVE-2020-8015
- SUSE Bug 1154062
- SUSE Bug 1154183