Alerts This Week
Warning Icon 1 924
Alerts This Week
Warning Icon 1 924

openSUSE: 2020:0368-1 Moderate: texlive-filesystem Security Update

opensuse
Calendar Grey March 23, 2020
Dist Opensuse Esm H88
A security patch for texlive-filesystem in openSUSE has been released, classified as having moderate severity, addressing various vulnerabilities.
An update that contains security fixes can now be installed.

Description

This update for texlive-filesystem fixes the following issues:

Security issues fixed:

- Changed default user for ls-R files and font cache directories to user

nobody (bsc#1159740)

- Switched to rm instead of safe-rm or safe-rmdir to avoid race conditions

(bsc#1158910) .

- Made cron script more failsafe (bsc#1150556)

Non-security issue fixed:

- Refreshed font map files on update (bsc#1155381)

This update was imported from the SUSE:SLE-15:Update update project.

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 15.1:

zypper in -t patch openSUSE-2020-368=1

Package List

- openSUSE Leap 15.1 (noarch):

texlive-collection-basic-2017.135.svn41616-lp151.8.3.1

texlive-collection-bibtexextra-2017.135.svn44385-lp151.8.3.1

texlive-collection-binextra-2017.135.svn44515-lp151.8.3.1

texlive-collection-context-2017.135.svn42330-lp151.8.3.1

texlive-collection-fontsextra-2017.135.svn43356-lp151.8.3.1

texlive-collection-fontsrecommended-2017.135.svn35830-lp151.8.3.1

texlive-collection-fontutils-2017.135.svn37105-lp151.8.3.1

texlive-collection-formatsextra-2017.135.svn44177-lp151.8.3.1

texlive-collection-games-2017.135.svn42992-lp151.8.3.1

texlive-collection-humanities-2017.135.svn42268-lp151.8.3.1

texlive-collection-langarabic-2017.135.svn44496-lp151.8.3.1

texlive-collection-langchinese-2017.135.svn42675-lp151.8.3.1

texlive-collection-langcjk-2017.135.svn43009-lp151.8.3.1

texlive-collection-langcyrillic-2017.135.svn44401-lp151.8.3.1

texlive-collection-langczechslovak-2017.135.svn32550-lp151.8.3.1

texlive-collection-langenglish-2017.135.svn43650-lp151.8.3.1

texlive-collection-langeuro...

Read the Full Advisory

References

https://bugzilla.suse.com/1150556

https://bugzilla.suse.com/1155381

https://bugzilla.suse.com/1158910

https://bugzilla.suse.com/1159740

--

Announcement ID: openSUSE-SU-2020:0368-1
Rating: moderate
Affected Products: openSUSE Leap 15.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here