Oval Definition:oval:org.opensuse.security:def:74595
Revision Date:2020-12-01Version:1
Title:Security update for trousers (Moderate)
Description:

This update for trousers fixes the following issues:

- CVE-2019-18898: Fixed a local symlink attack where a rogue tss user could have gain ownership of arbitrary files in the system during installation/update of the trousers package (bsc#1157651).

This update was imported from the SUSE:SLE-15-SP1:Update update project.
Family:unixClass:patch
Status:Reference(s):1148987
1155338
1155339
1157651
CVE-2019-13627
CVE-2019-18898
openSUSE-SU-2020:0015-1
openSUSE-SU-2020:0022-1
Platform(s):openSUSE Leap 15.1
Product(s):
Definition Synopsis
  • openSUSE Leap 15.1 is installed
  • AND Package Information
  • libtspi1-0.3.14-lp151.4.3 is installed
  • OR libtspi1-32bit-0.3.14-lp151.4.3 is installed
  • OR trousers-0.3.14-lp151.4.3 is installed
  • OR trousers-devel-0.3.14-lp151.4.3 is installed
    • BACK