Detections
Analytics

openSUSE Security Update : obs-service-refresh_patches (openSUSE-2018-1029)

medium Nessus Plugin ID 117659

Language:

Synopsis

The remote openSUSE host is missing a security update.

Description

This update for obs-service-refresh_patches fixes the following security issue :

 - An attacker creating a specially formated archive could have tricked the service in deleting directories that shouldn't be deleted (boo#1108189)

Solution

Update the affected obs-service-refresh_patches package.

See Also

https://bugzilla.opensuse.org/show_bug.cgi?id=1108189

Plugin Details

Severity: Medium

ID: 117659

File Name: openSUSE-2018-1029.nasl

Version: 1.3

Type: Local

Agent: unix

Published: 9/24/2018

Updated: 1/19/2021

Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Continuous Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus

Vulnerability Information

CPE: cpe:/o:novell:opensuse:42.3, cpe:/o:novell:opensuse:15.0, p-cpe:/a:novell:opensuse:obs-service-refresh_patches

Required KB Items: Host/local_checks_enabled, Host/SuSE/release, Host/SuSE/rpm-list

Patch Publication Date: 9/21/2018