virt-bootstrap 1.1.0 allows local users to discover a root password by listing a process, because this password may be present in the --root-password option to virt_bootstrap.py.

This update for virt-bootstrap fixes the following issues :

Security issue fixed :

  - CVE-2019-13314: Allow providing the container's root     password using a file (bsc#1140750).

This update was imported from the SUSE:SLE-15:Update update project.

Update to new upstream release: 1.1.1 Security fix for CVE-2019-13314

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
142631	openSUSE Security Update : virt-bootstrap (openSUSE-2020-1856)	Nessus	SuSE Local Security Checks	high
142162	openSUSE Security Update : virt-bootstrap (openSUSE-2020-1787)	Nessus	SuSE Local Security Checks	high
126803	Fedora 29 : virt-bootstrap (2019-e465ec0651)	Nessus	Fedora Local Security Checks	high
126795	Fedora 30 : virt-bootstrap (2019-2084f9e721)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2019-13314

high

Tenable Plugins

high

high

high

high