Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 523
Alerts This Week
Warning Icon 1 523

openSUSE: 2018:1900-1 Moderate: Git-Annex Security Patch Update

opensuse
Calendar Grey July 6, 2018
Scroller Opensuse
Update for git-annex available on openSUSE addressing potential information leakage with file content. Detailed patching steps provided.
An update that fixes two vulnerabilities is now available.

Description

This update for git-annex to version 6.20180626 fixes the following issues:

- CVE-2018-10857: Prevent file content disclosure by refusing to download

content that cannot be verified with a hash, from encrypted special

remotes and glacier (bsc#1098062).

- CVE-2018-10859: Prevent local gpg encrypted file disclosure by refusing

to download content that cannot be verified with a hash, from encrypted

special remotes (bsc#1098364).

This update brings many other bug fixes and new features.

https://hackage.haskell.org/package/git-annex-6.20180626/changelog has a

detailed list of changes.

Topics%20covered

Topics Covered

security advisory moderate file protection openSUSE git-annex content disclosure

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- SUSE Package Hub for SUSE Linux Enterprise 12:

zypper in -t patch openSUSE-2018-697=1

Package List

- SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64):

git-annex-6.20180626-7.1

git-annex-bash-completion-6.20180626-7.1

References

https://www.suse.com/security/cve/CVE-2018-10857.html

https://www.suse.com/security/cve/CVE-2018-10859.html

https://bugzilla.suse.com/1098062

https://bugzilla.suse.com/1098364

--

Announcement ID: openSUSE-SU-2018:1897-1
Rating: moderate
Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12

Topics%20covered

Topics Covered

security advisory moderate file protection openSUSE git-annex content disclosure

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.