Lucene search

K
suseSuseOPENSUSE-SU-2018:3710-1
HistoryNov 10, 2018 - 12:24 a.m.

Security update for accountsservice (moderate)

2018-11-1000:24:45
lists.opensuse.org
500

0.002 Low

EPSS

Percentile

55.5%

This update for accountsservice fixes the following issues:

This security issue was fixed:

  • CVE-2018-14036: Prevent directory traversal caused by an insufficient
    path check in user_change_icon_file_authorized_cb() (bsc#1099699)

Thsese non-security issues were fixed:

  • Don’t abort loading users when an /etc/shadow entry is missing.
    (bsc#1090003)
  • When user session type is wayland, act_user_is_logged_in can return TRUE
    if the user is logged in. (bsc#1095918)

This update was imported from the SUSE:SLE-15:Update update project.