shield Security update for accountsservice

SUSE-SLE-SERVER-12-SP4-2019-2778

This update for accountsservice fixes the following issues: Security issue fixed: - CVE-2018-14036: Prevent directory traversal caused by an insufficient path check in user_change_icon_file_authorized_cb() (bsc#1099699). Non-security issue fixed: - Improved wtmp io performance (bsc#1139487).

• Release Date
  Oct 24 2019
• References
  Bugzilla: 1099699, 1139487
  CVEs: CVE-2018-14036
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 12.4 aarch64

• Packages
  accountsservice
  D-Bus Service to Manipulate User Account Information

  0.6.42-16.8.3

  lock rpm

  lock src

  accountsservice-lang
  Languages for package accountsservice

  0.6.42-16.8.3

  lock rpm

  libaccountsservice0
  D-Bus Service to Manipulate User Account Information -- Client Library

  0.6.42-16.8.3

  lock rpm

  typelib-1_0-AccountsService-1_0
  D-Bus Service to Manipulate User Account Information -- Introspection bindings

  0.6.42-16.8.3

  lock rpm

SUSE Linux Enterprise Server 12.4 s390x

• Packages
  accountsservice
  D-Bus Service to Manipulate User Account Information

  0.6.42-16.8.3

  lock rpm

  lock src

  accountsservice-lang
  Languages for package accountsservice

  0.6.42-16.8.3

  lock rpm

  libaccountsservice0
  D-Bus Service to Manipulate User Account Information -- Client Library

  0.6.42-16.8.3

  lock rpm

  typelib-1_0-AccountsService-1_0
  D-Bus Service to Manipulate User Account Information -- Introspection bindings

  0.6.42-16.8.3

  lock rpm

SUSE Linux Enterprise Server 12.4 x86_64

• Packages
  accountsservice
  D-Bus Service to Manipulate User Account Information

  0.6.42-16.8.3

  lock rpm

  lock src

  accountsservice-lang
  Languages for package accountsservice

  0.6.42-16.8.3

  lock rpm

  libaccountsservice0
  D-Bus Service to Manipulate User Account Information -- Client Library

  0.6.42-16.8.3

  lock rpm

  typelib-1_0-AccountsService-1_0
  D-Bus Service to Manipulate User Account Information -- Introspection bindings

  0.6.42-16.8.3

  lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.4 ppc64le

• Packages
  accountsservice
  D-Bus Service to Manipulate User Account Information

  0.6.42-16.8.3

  lock rpm

  lock src

  accountsservice-lang
  Languages for package accountsservice

  0.6.42-16.8.3

  lock rpm

  libaccountsservice0
  D-Bus Service to Manipulate User Account Information -- Client Library

  0.6.42-16.8.3

  lock rpm

  typelib-1_0-AccountsService-1_0
  D-Bus Service to Manipulate User Account Information -- Introspection bindings

  0.6.42-16.8.3

  lock rpm