SUSE-SU-2020:0520-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2020/suse-su-20200520-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0520-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2020:0520-1

Published

2020-02-27T13:55:35Z

Modified

2020-02-27T13:55:35Z

Summary

Security update for texlive-filesystem

Details

This update for texlive-filesystem fixes the following issues:

Security issues fixed:

Changed default user for ls-R files and font cache directories to user nobody (bsc#1159740)
Switched to rm instead of safe-rm or safe-rmdir to avoid race conditions (bsc#1158910) .
Made cron script more failsafe (bsc#1150556)

Non-security issue fixed:

Refreshed font map files on update (bsc#1155381)

References

Affected packages

SUSE:Linux Enterprise Software Development Kit 12 SP4

texlive-filesystem

Package

Name: texlive-filesystem
Purl: pkg:rpm/suse/texlive-filesystem&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2013.74-16.5.1

Ecosystem specific

{
    "binaries":  [
        {
            "texlive-collection-basic":  "2013.74.svn30372-16.5.1",
            "texlive-collection-fontsrecommended":  "2013.74.svn30307-16.5.1",
            "texlive-collection-htmlxml":  "2013.74.svn30307-16.5.1",
            "texlive-collection-latex":  "2013.74.svn30308-16.5.1",
            "texlive-collection-latexrecommended":  "2013.74.svn30811-16.5.1",
            "texlive-collection-luatex":  "2013.74.svn30790-16.5.1",
            "texlive-collection-xetex":  "2013.74.svn30396-16.5.1",
            "texlive-devel":  "2013.74-16.5.1",
            "texlive-extratools":  "2013.74-16.5.1",
            "texlive-filesystem":  "2013.74-16.5.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0520-1.json"

SUSE:Linux Enterprise Software Development Kit 12 SP5