SUSE Security Update: Security update for texlive-filesystem
______________________________________________________________________________

Announcement ID:    SUSE-SU-2020:1580-1
Rating:             moderate
References:         #1158910 #1159740 
Cross-References:   CVE-2020-8016 CVE-2020-8017
Affected Products:
                    SUSE Linux Enterprise Module for Desktop Applications 15-SP1
______________________________________________________________________________

   An update that fixes two vulnerabilities is now available.

Description:

   This update for texlive-filesystem fixes the following issues:

   Security issues fixed:

   - CVE-2020-8016: Fixed a race condition in the spec file (bsc#1159740).
   - CVE-2020-8017: Fixed a race condition on a cron job (bsc#1158910).


Patch Instructions:

   To install this SUSE Security Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Module for Desktop Applications 15-SP1:

      zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP1-2020-1580=1



Package List:

   - SUSE Linux Enterprise Module for Desktop Applications 15-SP1 (aarch64 ppc64le s390x x86_64):

      libkpathsea6-6.2.3-11.13.2
      libkpathsea6-debuginfo-6.2.3-11.13.2
      libptexenc1-1.3.5-11.13.2
      libptexenc1-debuginfo-1.3.5-11.13.2
      libsynctex1-1.18-11.13.2
      libsynctex1-debuginfo-1.18-11.13.2
      libtexlua52-5-5.2.4-11.13.2
      libtexlua52-5-debuginfo-5.2.4-11.13.2
      texlive-2017.20170520-11.13.2
      texlive-a2ping-bin-2017.20170520.svn27321-11.13.2
      texlive-accfonts-bin-2017.20170520.svn12688-11.13.2
      texlive-adhocfilelist-bin-2017.20170520.svn28038-11.13.2
      texlive-afm2pl-bin-2017.20170520.svn44143-11.13.2
      texlive-afm2pl-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-aleph-bin-2017.20170520.svn44143-11.13.2
      texlive-aleph-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-amstex-bin-2017.20170520.svn3006-11.13.2
      texlive-arara-bin-2017.20170520.svn29036-11.13.2
      texlive-asymptote-bin-2017.20170520.svn43843-11.13.2
      texlive-asymptote-bin-debuginfo-2017.20170520.svn43843-11.13.2
      texlive-authorindex-bin-2017.20170520.svn18790-11.13.2
      texlive-autosp-bin-2017.20170520.svn44143-11.13.2
      texlive-autosp-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-bibexport-bin-2017.20170520.svn16219-11.13.2
      texlive-bibtex-bin-2017.20170520.svn44143-11.13.2
      texlive-bibtex-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-bibtex8-bin-2017.20170520.svn44143-11.13.2
      texlive-bibtex8-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-bibtexu-bin-2017.20170520.svn44143-11.13.2
      texlive-bibtexu-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-bin-devel-2017.20170520-11.13.2
      texlive-bundledoc-bin-2017.20170520.svn17794-11.13.2
      texlive-cachepic-bin-2017.20170520.svn15543-11.13.2
      texlive-checkcites-bin-2017.20170520.svn25623-11.13.2
      texlive-checklistings-bin-2017.20170520.svn38300-11.13.2
      texlive-chktex-bin-2017.20170520.svn44143-11.13.2
      texlive-chktex-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-cjk-gs-integrate-bin-2017.20170520.svn37223-11.13.2
      texlive-cjkutils-bin-2017.20170520.svn44143-11.13.2
      texlive-cjkutils-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-context-bin-2017.20170520.svn34112-11.13.2
      texlive-convbkmk-bin-2017.20170520.svn30408-11.13.2
      texlive-crossrefware-bin-2017.20170520.svn43866-11.13.2
      texlive-cslatex-bin-2017.20170520.svn3006-11.13.2
      texlive-csplain-bin-2017.20170520.svn33902-11.13.2
      texlive-ctanify-bin-2017.20170520.svn24061-11.13.2
      texlive-ctanupload-bin-2017.20170520.svn23866-11.13.2
      texlive-ctie-bin-2017.20170520.svn44143-11.13.2
      texlive-ctie-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-cweb-bin-2017.20170520.svn44143-11.13.2
      texlive-cweb-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-cyrillic-bin-bin-2017.20170520.svn29741-11.13.2
      texlive-de-macro-bin-2017.20170520.svn17399-11.13.2
      texlive-debuginfo-2017.20170520-11.13.2
      texlive-debugsource-2017.20170520-11.13.2
      texlive-detex-bin-2017.20170520.svn44143-11.13.2
      texlive-detex-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-dosepsbin-bin-2017.20170520.svn24759-11.13.2
      texlive-dtl-bin-2017.20170520.svn44143-11.13.2
      texlive-dtl-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-dtxgen-bin-2017.20170520.svn29031-11.13.2
      texlive-dviasm-bin-2017.20170520.svn8329-11.13.2
      texlive-dvicopy-bin-2017.20170520.svn44143-11.13.2
      texlive-dvicopy-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-dvidvi-bin-2017.20170520.svn44143-11.13.2
      texlive-dvidvi-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-dviinfox-bin-2017.20170520.svn44515-11.13.2
      texlive-dviljk-bin-2017.20170520.svn44143-11.13.2
      texlive-dviljk-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-dvipdfmx-bin-2017.20170520.svn40273-11.13.2
      texlive-dvipng-bin-2017.20170520.svn44143-11.13.2
      texlive-dvipng-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-dvipos-bin-2017.20170520.svn44143-11.13.2
      texlive-dvipos-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-dvips-bin-2017.20170520.svn44143-11.13.2
      texlive-dvips-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-dvisvgm-bin-2017.20170520.svn40987-11.13.2
      texlive-dvisvgm-bin-debuginfo-2017.20170520.svn40987-11.13.2
      texlive-ebong-bin-2017.20170520.svn21000-11.13.2
      texlive-eplain-bin-2017.20170520.svn3006-11.13.2
      texlive-epspdf-bin-2017.20170520.svn29050-11.13.2
      texlive-epstopdf-bin-2017.20170520.svn18336-11.13.2
      texlive-exceltex-bin-2017.20170520.svn25860-11.13.2
      texlive-fig4latex-bin-2017.20170520.svn14752-11.13.2
      texlive-findhyph-bin-2017.20170520.svn14758-11.13.2
      texlive-fontinst-bin-2017.20170520.svn29741-11.13.2
      texlive-fontools-bin-2017.20170520.svn25997-11.13.2
      texlive-fontware-bin-2017.20170520.svn44143-11.13.2
      texlive-fontware-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-fragmaster-bin-2017.20170520.svn13663-11.13.2
      texlive-getmap-bin-2017.20170520.svn34971-11.13.2
      texlive-glossaries-bin-2017.20170520.svn37813-11.13.2
      texlive-gregoriotex-bin-2017.20170520.svn44143-11.13.2
      texlive-gregoriotex-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-gsftopk-bin-2017.20170520.svn44143-11.13.2
      texlive-gsftopk-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-jadetex-bin-2017.20170520.svn3006-11.13.2
      texlive-kotex-utils-bin-2017.20170520.svn32101-11.13.2
      texlive-kpathsea-bin-2017.20170520.svn44143-11.13.2
      texlive-kpathsea-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-kpathsea-devel-6.2.3-11.13.2
      texlive-lacheck-bin-2017.20170520.svn44143-11.13.2
      texlive-lacheck-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-latex-bin-bin-2017.20170520.svn14050-11.13.2
      texlive-latex-git-log-bin-2017.20170520.svn30983-11.13.2
      texlive-latex-papersize-bin-2017.20170520.svn42296-11.13.2
      texlive-latex2man-bin-2017.20170520.svn13663-11.13.2
      texlive-latex2nemeth-bin-2017.20170520.svn42300-11.13.2
      texlive-latexdiff-bin-2017.20170520.svn16420-11.13.2
      texlive-latexfileversion-bin-2017.20170520.svn25012-11.13.2
      texlive-latexindent-bin-2017.20170520.svn32150-11.13.2
      texlive-latexmk-bin-2017.20170520.svn10937-11.13.2
      texlive-latexpand-bin-2017.20170520.svn27025-11.13.2
      texlive-lcdftypetools-bin-2017.20170520.svn44143-11.13.2
      texlive-lcdftypetools-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-lilyglyphs-bin-2017.20170520.svn31696-11.13.2
      texlive-listbib-bin-2017.20170520.svn26126-11.13.2
      texlive-listings-ext-bin-2017.20170520.svn15093-11.13.2
      texlive-lollipop-bin-2017.20170520.svn41465-11.13.2
      texlive-ltxfileinfo-bin-2017.20170520.svn29005-11.13.2
      texlive-ltximg-bin-2017.20170520.svn32346-11.13.2
      texlive-lua2dox-bin-2017.20170520.svn29053-11.13.2
      texlive-luaotfload-bin-2017.20170520.svn34647-11.13.2
      texlive-luatex-bin-2017.20170520.svn44549-11.13.2
      texlive-luatex-bin-debuginfo-2017.20170520.svn44549-11.13.2
      texlive-lwarp-bin-2017.20170520.svn43292-11.13.2
      texlive-m-tx-bin-2017.20170520.svn44143-11.13.2
      texlive-m-tx-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-make4ht-bin-2017.20170520.svn37750-11.13.2
      texlive-makedtx-bin-2017.20170520.svn38769-11.13.2
      texlive-makeindex-bin-2017.20170520.svn44143-11.13.2
      texlive-makeindex-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-match_parens-bin-2017.20170520.svn23500-11.13.2
      texlive-mathspic-bin-2017.20170520.svn23661-11.13.2
      texlive-metafont-bin-2017.20170520.svn44143-11.13.2
      texlive-metafont-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-metapost-bin-2017.20170520.svn44143-11.13.2
      texlive-metapost-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-mex-bin-2017.20170520.svn3006-11.13.2
      texlive-mf2pt1-bin-2017.20170520.svn23406-11.13.2
      texlive-mflua-bin-2017.20170520.svn44143-11.13.2
      texlive-mflua-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-mfware-bin-2017.20170520.svn44143-11.13.2
      texlive-mfware-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-mkgrkindex-bin-2017.20170520.svn14428-11.13.2
      texlive-mkjobtexmf-bin-2017.20170520.svn8457-11.13.2
      texlive-mkpic-bin-2017.20170520.svn33688-11.13.2
      texlive-mltex-bin-2017.20170520.svn3006-11.13.2
      texlive-mptopdf-bin-2017.20170520.svn18674-11.13.2
      texlive-multibibliography-bin-2017.20170520.svn30534-11.13.2
      texlive-musixtex-bin-2017.20170520.svn37026-11.13.2
      texlive-musixtnt-bin-2017.20170520.svn44143-11.13.2
      texlive-musixtnt-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-omegaware-bin-2017.20170520.svn44143-11.13.2
      texlive-omegaware-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-patgen-bin-2017.20170520.svn44143-11.13.2
      texlive-patgen-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-pax-bin-2017.20170520.svn10843-11.13.2
      texlive-pdfbook2-bin-2017.20170520.svn37537-11.13.2
      texlive-pdfcrop-bin-2017.20170520.svn14387-11.13.2
      texlive-pdfjam-bin-2017.20170520.svn17868-11.13.2
      texlive-pdflatexpicscale-bin-2017.20170520.svn41779-11.13.2
      texlive-pdftex-bin-2017.20170520.svn44143-11.13.2
      texlive-pdftex-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-pdftools-bin-2017.20170520.svn44143-11.13.2
      texlive-pdftools-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-pdfxup-bin-2017.20170520.svn40690-11.13.2
      texlive-pedigree-perl-bin-2017.20170520.svn25962-11.13.2
      texlive-perltex-bin-2017.20170520.svn16181-11.13.2
      texlive-petri-nets-bin-2017.20170520.svn39165-11.13.2
      texlive-pfarrei-bin-2017.20170520.svn29348-11.13.2
      texlive-pkfix-bin-2017.20170520.svn13364-11.13.2
      texlive-pkfix-helper-bin-2017.20170520.svn13663-11.13.2
      texlive-platex-bin-2017.20170520.svn22859-11.13.2
      texlive-pmx-bin-2017.20170520.svn44143-11.13.2
      texlive-pmx-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-pmxchords-bin-2017.20170520.svn32405-11.13.2
      texlive-ps2pk-bin-2017.20170520.svn44143-11.13.2
      texlive-ps2pk-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-pst-pdf-bin-2017.20170520.svn7838-11.13.2
      texlive-pst2pdf-bin-2017.20170520.svn29333-11.13.2
      texlive-pstools-bin-2017.20170520.svn44143-11.13.2
      texlive-pstools-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-ptex-bin-2017.20170520.svn44143-11.13.2
      texlive-ptex-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-ptex-fontmaps-bin-2017.20170520.svn44206-11.13.2
      texlive-ptex2pdf-bin-2017.20170520.svn29335-11.13.2
      texlive-ptexenc-devel-1.3.5-11.13.2
      texlive-purifyeps-bin-2017.20170520.svn13663-11.13.2
      texlive-pygmentex-bin-2017.20170520.svn34996-11.13.2
      texlive-pythontex-bin-2017.20170520.svn31638-11.13.2
      texlive-rubik-bin-2017.20170520.svn32919-11.13.2
      texlive-seetexk-bin-2017.20170520.svn44143-11.13.2
      texlive-seetexk-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-splitindex-bin-2017.20170520.svn29688-11.13.2
      texlive-srcredact-bin-2017.20170520.svn38710-11.13.2
      texlive-sty2dtx-bin-2017.20170520.svn21215-11.13.2
      texlive-svn-multi-bin-2017.20170520.svn13663-11.13.2
      texlive-synctex-bin-2017.20170520.svn44143-11.13.2
      texlive-synctex-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-synctex-devel-1.18-11.13.2
      texlive-tetex-bin-2017.20170520.svn43957-11.13.2
      texlive-tex-bin-2017.20170520.svn44143-11.13.2
      texlive-tex-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-tex4ebook-bin-2017.20170520.svn37771-11.13.2
      texlive-tex4ht-bin-2017.20170520.svn44143-11.13.2
      texlive-tex4ht-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-texconfig-bin-2017.20170520.svn29741-11.13.2
      texlive-texcount-bin-2017.20170520.svn13013-11.13.2
      texlive-texdef-bin-2017.20170520.svn21802-11.13.2
      texlive-texdiff-bin-2017.20170520.svn15506-11.13.2
      texlive-texdirflatten-bin-2017.20170520.svn12782-11.13.2
      texlive-texdoc-bin-2017.20170520.svn29741-11.13.2
      texlive-texfot-bin-2017.20170520.svn33155-11.13.2
      texlive-texliveonfly-bin-2017.20170520.svn24062-11.13.2
      texlive-texloganalyser-bin-2017.20170520.svn13663-11.13.2
      texlive-texlua-devel-5.2.4-11.13.2
      texlive-texosquery-bin-2017.20170520.svn43596-11.13.2
      texlive-texsis-bin-2017.20170520.svn3006-11.13.2
      texlive-texware-bin-2017.20170520.svn44143-11.13.2
      texlive-texware-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-thumbpdf-bin-2017.20170520.svn6898-11.13.2
      texlive-tie-bin-2017.20170520.svn44143-11.13.2
      texlive-tie-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-tpic2pdftex-bin-2017.20170520.svn29741-11.13.2
      texlive-ttfutils-bin-2017.20170520.svn44143-11.13.2
      texlive-ttfutils-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-typeoutfileinfo-bin-2017.20170520.svn25648-11.13.2
      texlive-ulqda-bin-2017.20170520.svn13663-11.13.2
      texlive-uplatex-bin-2017.20170520.svn26326-11.13.2
      texlive-uptex-bin-2017.20170520.svn44143-11.13.2
      texlive-uptex-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-urlbst-bin-2017.20170520.svn23262-11.13.2
      texlive-velthuis-bin-2017.20170520.svn44143-11.13.2
      texlive-velthuis-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-vlna-bin-2017.20170520.svn44143-11.13.2
      texlive-vlna-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-vpe-bin-2017.20170520.svn6897-11.13.2
      texlive-web-bin-2017.20170520.svn44143-11.13.2
      texlive-web-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-xdvi-bin-2017.20170520.svn44143-11.13.2
      texlive-xdvi-bin-debuginfo-2017.20170520.svn44143-11.13.2
      texlive-xetex-bin-2017.20170520.svn44361-11.13.2
      texlive-xetex-bin-debuginfo-2017.20170520.svn44361-11.13.2
      texlive-xmltex-bin-2017.20170520.svn3006-11.13.2
      texlive-yplan-bin-2017.20170520.svn34398-11.13.2

   - SUSE Linux Enterprise Module for Desktop Applications 15-SP1 (aarch64 x86_64):

      libtexluajit2-2.1.0beta2-11.13.2
      libtexluajit2-debuginfo-2.1.0beta2-11.13.2
      texlive-texluajit-devel-2.1.0beta2-11.13.2

   - SUSE Linux Enterprise Module for Desktop Applications 15-SP1 (noarch):

      perl-biber-2017.20170520.svn30357-11.13.2
      texlive-biber-bin-2017.20170520.svn42679-11.13.2
      texlive-collection-basic-2017.135.svn41616-9.12.1
      texlive-collection-bibtexextra-2017.135.svn44385-9.12.1
      texlive-collection-binextra-2017.135.svn44515-9.12.1
      texlive-collection-context-2017.135.svn42330-9.12.1
      texlive-collection-fontsextra-2017.135.svn43356-9.12.1
      texlive-collection-fontsrecommended-2017.135.svn35830-9.12.1
      texlive-collection-fontutils-2017.135.svn37105-9.12.1
      texlive-collection-formatsextra-2017.135.svn44177-9.12.1
      texlive-collection-games-2017.135.svn42992-9.12.1
      texlive-collection-humanities-2017.135.svn42268-9.12.1
      texlive-collection-langarabic-2017.135.svn44496-9.12.1
      texlive-collection-langchinese-2017.135.svn42675-9.12.1
      texlive-collection-langcjk-2017.135.svn43009-9.12.1
      texlive-collection-langcyrillic-2017.135.svn44401-9.12.1
      texlive-collection-langczechslovak-2017.135.svn32550-9.12.1
      texlive-collection-langenglish-2017.135.svn43650-9.12.1
      texlive-collection-langeuropean-2017.135.svn44414-9.12.1
      texlive-collection-langfrench-2017.135.svn40375-9.12.1
      texlive-collection-langgerman-2017.135.svn42045-9.12.1
      texlive-collection-langgreek-2017.135.svn44192-9.12.1
      texlive-collection-langitalian-2017.135.svn30372-9.12.1
      texlive-collection-langjapanese-2017.135.svn44554-9.12.1
      texlive-collection-langkorean-2017.135.svn42106-9.12.1
      texlive-collection-langother-2017.135.svn44414-9.12.1
      texlive-collection-langpolish-2017.135.svn44371-9.12.1
      texlive-collection-langportuguese-2017.135.svn30962-9.12.1
      texlive-collection-langspanish-2017.135.svn40587-9.12.1
      texlive-collection-latex-2017.135.svn41614-9.12.1
      texlive-collection-latexextra-2017.135.svn44544-9.12.1
      texlive-collection-latexrecommended-2017.135.svn44177-9.12.1
      texlive-collection-luatex-2017.135.svn44500-9.12.1
      texlive-collection-mathscience-2017.135.svn44396-9.12.1
      texlive-collection-metapost-2017.135.svn44297-9.12.1
      texlive-collection-music-2017.135.svn40561-9.12.1
      texlive-collection-pictures-2017.135.svn44395-9.12.1
      texlive-collection-plaingeneric-2017.135.svn44177-9.12.1
      texlive-collection-pstricks-2017.135.svn44460-9.12.1
      texlive-collection-publishers-2017.135.svn44485-9.12.1
      texlive-collection-xetex-2017.135.svn43059-9.12.1
      texlive-devel-2017.135-9.12.1
      texlive-diadia-bin-2017.20170520.svn37645-11.13.2
      texlive-extratools-2017.135-9.12.1
      texlive-filesystem-2017.135-9.12.1
      texlive-scheme-basic-2017.135.svn25923-9.12.1
      texlive-scheme-context-2017.135.svn35799-9.12.1
      texlive-scheme-full-2017.135.svn44177-9.12.1
      texlive-scheme-gust-2017.135.svn44177-9.12.1
      texlive-scheme-infraonly-2017.135.svn41515-9.12.1
      texlive-scheme-medium-2017.135.svn44177-9.12.1
      texlive-scheme-minimal-2017.135.svn13822-9.12.1
      texlive-scheme-small-2017.135.svn41825-9.12.1
      texlive-scheme-tetex-2017.135.svn44187-9.12.1


References:

   https://www.suse.com/security/cve/CVE-2020-8016.html
   https://www.suse.com/security/cve/CVE-2020-8017.html
   https://bugzilla.suse.com/1158910
   https://bugzilla.suse.com/1159740

_______________________________________________
sle-security-updates mailing list
sle-security-updates@lists.suse.com
http://lists.suse.com/mailman/listinfo/sle-security-updates