SUSE-SU-2020:1712-1

Details

Description of the patch:

This update for xawtv fixes the following issues:

CVE-2020-13696: Fixed an issue in setuid-root program that which could have allowed arbitrary file existence tests and open() with O_RDWR (bsc#1171655).

Affected Packages

tv-common

SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP4SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

3.103-6.3.1

v4l-conf

SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP4SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

3.103-6.3.1

v4l-tools

SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP4SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

3.103-6.3.1

References

ADVISORY

https://bugzilla.suse.com/1171655

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2020-June/007006.html

ADVISORY

https://www.suse.com/security/cve/CVE-2020-13696/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2020/suse-su-20201712-1/