< back to search

shield Security update for trousers
SUSE-SLE-Module-Basesystem-15-SP1-2019-3349

This update for trousers fixes the following issues: - CVE-2019-18898: Fixed a local symlink attack where a rogue tss user could have gain ownership of arbitrary files in the system during installation/update of the trousers package (bsc#1157651).

  • Release Date
    Dec 19 2019
  • References
    Bugzilla: 1157651
    CVEs: CVE-2019-18898
  • Type
    security
  • Severity
    moderate

cloud_download Downloads

Basesystem Module 15.1 x86_64
  • Packages
    libtspi1
    TSS (TCG Software Stack) access daemon for a TPM chip
    0.3.14-6.3.1 lock rpm
    trousers
    TSS (TCG Software Stack) access daemon for a TPM chip
    0.3.14-6.3.1 lock rpm lock src
    trousers-devel
    TSS (TCG Software Stack) access daemon for a TPM chip
    0.3.14-6.3.1 lock rpm
Basesystem Module 15.1 aarch64
  • Packages
    libtspi1
    TSS (TCG Software Stack) access daemon for a TPM chip
    0.3.14-6.3.1 lock rpm
    trousers
    TSS (TCG Software Stack) access daemon for a TPM chip
    0.3.14-6.3.1 lock rpm lock src
    trousers-devel
    TSS (TCG Software Stack) access daemon for a TPM chip
    0.3.14-6.3.1 lock rpm
Basesystem Module 15.1 ppc64le
  • Packages
    libtspi1
    TSS (TCG Software Stack) access daemon for a TPM chip
    0.3.14-6.3.1 lock rpm
    trousers
    TSS (TCG Software Stack) access daemon for a TPM chip
    0.3.14-6.3.1 lock rpm lock src
    trousers-devel
    TSS (TCG Software Stack) access daemon for a TPM chip
    0.3.14-6.3.1 lock rpm
Basesystem Module 15.1 s390x
  • Packages
    libtspi1
    TSS (TCG Software Stack) access daemon for a TPM chip
    0.3.14-6.3.1 lock rpm
    trousers
    TSS (TCG Software Stack) access daemon for a TPM chip
    0.3.14-6.3.1 lock rpm lock src
    trousers-devel
    TSS (TCG Software Stack) access daemon for a TPM chip
    0.3.14-6.3.1 lock rpm