CVE-2016-1601

CVE-2016-1601 affects yast2-users prior to 3.1.47 used in SUSE/SLES12 SP1. The issue: during AutoYaST installations, if the profile omits inst-sys users, empty password fields in /etc/shadow are not set correctly, which could lead to an unspecified impact via unknown vectors. Multiple advisories ...