CVE-2018-17955

CVE-2018-17955 affects yast2-multipath prior to version 4.1.1. The vulnerability arises from a static temporary filename that allows local attackers to overwrite files on systems without symlink protection. Impact is described as local complete/partial integrity on affected files with potential a...

PT-2019-9535

Name of the Vulnerable Software and Affected Versions yast2-multipath versions prior to 4.1.1 Description The issue allows local attackers to overwrite files on systems without symlink protection due to a static temporary filename. Recommendations For versions prior to 4.1.1, update to version...

openSUSE Security Update : supportutils (openSUSE-2019-293)

This update for supportutils fixes the following issues : Security issues fixed : - CVE-2018-19640: Fixed an issue where users could kill arbitrary processes bsc1118463. - CVE-2018-19638: Fixed an issue where users could overwrite arbitrary log files bsc1118460. - CVE-2018-19639: Fixed a code...