Oval Definition:oval:org.opensuse.security:def:90261
Revision Date:2019-12-19Version:1
Title:Security update for trousers (Moderate)
Description:

This update for trousers fixes the following issues:

- CVE-2019-18898: Fixed a local symlink attack where a rogue tss user could have gain ownership of arbitrary files in the system during installation/update of the trousers package (bsc#1157651).
Family:unixClass:patch
Status:Reference(s):1157651
CVE-2019-18898
SUSE-SU-2019:3349-1
Platform(s):SUSE Linux Enterprise Desktop 15 SP1
SUSE Linux Enterprise High Performance Computing 15 SP1
SUSE Linux Enterprise Module for Basesystem 15 SP1
SUSE Linux Enterprise Server 15 SP1
SUSE Linux Enterprise Server for SAP Applications 15 SP1
SUSE Linux Enterprise Storage 6
SUSE Manager Proxy 4.0
SUSE Manager Server 4.0
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed
  • AND Package Information
  • libtspi1-0.3.14-6.3.1 is installed
  • OR trousers-0.3.14-6.3.1 is installed
  • OR trousers-devel-0.3.14-6.3.1 is installed
    • BACK