SUSE-SU-2023:3190-1

Details

Description of the patch:

This update for xtrans fixes the following issues:

CVE-2020-25697: Fixed local privilege escalation via TRANS_ABSTRACT on the client side (bsc#1178613).

Affected Packages

xtrans

SUSE Linux Enterprise Desktop 15 SP4SUSE Linux Enterprise Desktop 15 SP5SUSE Linux Enterprise High Performance Computing 15 SP4SUSE Linux Enterprise High Performance Computing 15 SP5SUSE Linux Enterprise Module for Basesystem 15 SP4

Fixed in:

0:1.3.5-150000.3.3.1

References

ADVISORY

https://bugzilla.suse.com/1178613

ADVISORY

https://lists.suse.com/pipermail/sle-updates/2023-August/030792.html

ADVISORY

https://www.suse.com/security/cve/CVE-2020-25697/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2023/suse-su-20233190-1/