openSUSE: 2018:2801-2: moderate: obs-service-refresh_patches
Description
This update for obs-service-refresh_patches fixes the following security issue: - An attacker creating a specially formated archive could have tricked the service in deleting directories that shouldn't be deleted (boo#1108189)
Patch
Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-1029=1
Package List
- openSUSE Backports SLE-15 (noarch): obs-service-refresh_patches-0.3.9+git.1537184752.d624424-bp150.3.3.1
References
https://bugzilla.suse.com/1108189--