SUSE-SU-2020:0519-1

Source
https://www.suse.com/support/update/announcement/2020/suse-su-20200519-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0519-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2020:0519-1
Published
2020-02-27T13:54:46Z
Modified
2020-02-27T13:54:46Z
Summary
Security update for texlive-filesystem
Details

This update for texlive-filesystem fixes the following issues:

Security issues fixed:

  • Changed default user for ls-R files and font cache directories to user nobody (bsc#1159740)
  • Switched to rm instead of safe-rm or safe-rmdir to avoid race conditions (bsc#1158910) .
  • Made cron script more failsafe (bsc#1150556)

Non-security issue fixed:

  • Refreshed font map files on update (bsc#1155381)
References

Affected packages

SUSE:Linux Enterprise Module for Desktop Applications 15 SP1 / texlive-filesystem

Package

Name
texlive-filesystem
Purl
pkg:rpm/suse/texlive-filesystem&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2017.135-9.5.1

Ecosystem specific

{
    "binaries":  [
        {
            "texlive-collection-basic":  "2017.135.svn41616-9.5.1",
            "texlive-collection-bibtexextra":  "2017.135.svn44385-9.5.1",
            "texlive-collection-binextra":  "2017.135.svn44515-9.5.1",
            "texlive-collection-context":  "2017.135.svn42330-9.5.1",
            "texlive-collection-fontsextra":  "2017.135.svn43356-9.5.1",
            "texlive-collection-fontsrecommended":  "2017.135.svn35830-9.5.1",
            "texlive-collection-fontutils":  "2017.135.svn37105-9.5.1",
            "texlive-collection-formatsextra":  "2017.135.svn44177-9.5.1",
            "texlive-collection-games":  "2017.135.svn42992-9.5.1",
            "texlive-collection-humanities":  "2017.135.svn42268-9.5.1",
            "texlive-collection-langarabic":  "2017.135.svn44496-9.5.1",
            "texlive-collection-langchinese":  "2017.135.svn42675-9.5.1",
            "texlive-collection-langcjk":  "2017.135.svn43009-9.5.1",
            "texlive-collection-langcyrillic":  "2017.135.svn44401-9.5.1",
            "texlive-collection-langczechslovak":  "2017.135.svn32550-9.5.1",
            "texlive-collection-langenglish":  "2017.135.svn43650-9.5.1",
            "texlive-collection-langeuropean":  "2017.135.svn44414-9.5.1",
            "texlive-collection-langfrench":  "2017.135.svn40375-9.5.1",
            "texlive-collection-langgerman":  "2017.135.svn42045-9.5.1",
            "texlive-collection-langgreek":  "2017.135.svn44192-9.5.1",
            "texlive-collection-langitalian":  "2017.135.svn30372-9.5.1",
            "texlive-collection-langjapanese":  "2017.135.svn44554-9.5.1",
            "texlive-collection-langkorean":  "2017.135.svn42106-9.5.1",
            "texlive-collection-langother":  "2017.135.svn44414-9.5.1",
            "texlive-collection-langpolish":  "2017.135.svn44371-9.5.1",
            "texlive-collection-langportuguese":  "2017.135.svn30962-9.5.1",
            "texlive-collection-langspanish":  "2017.135.svn40587-9.5.1",
            "texlive-collection-latex":  "2017.135.svn41614-9.5.1",
            "texlive-collection-latexextra":  "2017.135.svn44544-9.5.1",
            "texlive-collection-latexrecommended":  "2017.135.svn44177-9.5.1",
            "texlive-collection-luatex":  "2017.135.svn44500-9.5.1",
            "texlive-collection-mathscience":  "2017.135.svn44396-9.5.1",
            "texlive-collection-metapost":  "2017.135.svn44297-9.5.1",
            "texlive-collection-music":  "2017.135.svn40561-9.5.1",
            "texlive-collection-pictures":  "2017.135.svn44395-9.5.1",
            "texlive-collection-plaingeneric":  "2017.135.svn44177-9.5.1",
            "texlive-collection-pstricks":  "2017.135.svn44460-9.5.1",
            "texlive-collection-publishers":  "2017.135.svn44485-9.5.1",
            "texlive-collection-xetex":  "2017.135.svn43059-9.5.1",
            "texlive-devel":  "2017.135-9.5.1",
            "texlive-extratools":  "2017.135-9.5.1",
            "texlive-filesystem":  "2017.135-9.5.1",
            "texlive-scheme-basic":  "2017.135.svn25923-9.5.1",
            "texlive-scheme-context":  "2017.135.svn35799-9.5.1",
            "texlive-scheme-full":  "2017.135.svn44177-9.5.1",
            "texlive-scheme-gust":  "2017.135.svn44177-9.5.1",
            "texlive-scheme-infraonly":  "2017.135.svn41515-9.5.1",
            "texlive-scheme-medium":  "2017.135.svn44177-9.5.1",
            "texlive-scheme-minimal":  "2017.135.svn13822-9.5.1",
            "texlive-scheme-small":  "2017.135.svn41825-9.5.1",
            "texlive-scheme-tetex":  "2017.135.svn44187-9.5.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0519-1.json"