SUSE: 2019:0392-1 important: couchdb
Summary
This update for couchdb fixes the following issues: Security issue fixed: - CVE-2018-11769: Fixed a remote code execution vulnerability by removing the _config route from default.ini (bsc#1104204) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud Crowbar 8: zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-8-2019-392=1 Package List: - SUSE OpenStack Cloud Crowbar 8 (x86_64): couchdb-1.7.2-3.6.1 couchdb-debuginfo-1.7.2-3.6.1 couchdb-debugsource-1.7.2-3.6.1
References
#1104204
Cross- CVE-2018-11769
Affected Products:
SUSE OpenStack Cloud Crowbar 8
https://www.suse.com/security/cve/CVE-2018-11769.html
https://bugzilla.suse.com/1104204