CVE-2020-8016: race condition in the packaging of texlive-filesysten
A Race Condition Enabling Link Following vulnerability in the packaging of texlive-filesystem of SUSE Linux Enterprise Module for Desktop Applications 15-SP1, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1 allows local users to corrupt files or potentially escalate privileges. This issue affects: SUSE Linux Enterprise Module for Desktop Applications 15-SP1 texlive-filesystem versions prior to 2017.135-9.5.1. SUSE Linux Enterprise Software Development Kit 12-SP4 texlive-filesystem versions prior to 2013.74-16.5.1. SUSE Linux Enterprise Software Development Kit 12-SP5 texlive-filesystem versions prior to 2013.74-16.5.1. openSUSE Leap 15.1 texlive-filesystem versions prior to 2017.135-lp151.8.3.1.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
texlive-filesystemto a version that resolves this vulnerability.Fixed in 2013.74-16.5.1 - Upgrade
Upgrade
texlive-filesystemto a version that resolves this vulnerability.Fixed in 2017.135-9.5.1 - Upgrade
Upgrade
texlive-filesystemto a version that resolves this vulnerability.Fixed in 2017.135-lp151.8.3.1
Event History
Frequently Asked Questions
What is CVE-2020-8016?
CVE-2020-8016 is a Race Condition Enabling Link Following vulnerability in the packaging of texlive-filesystem of SUSE Linux Enterprise Module for Desktop Applications 15-SP1, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1.
Which software versions are affected by CVE-2020-8016?
CVE-2020-8016 affects texlive-filesystem of Opensuse versions 2017.135-9.5.1 and 2013.74-16.5.1, SUSE Linux Enterprise Desktop 15 SP1, SUSE Linux Enterprise Software Development Kit 12 SP4, SUSE Linux Enterprise Software Development Kit 12 SP5, and openSUSE Leap 15.1.
What is the severity of CVE-2020-8016?
CVE-2020-8016 has a severity value of 7, indicating a high severity.
How can I fix CVE-2020-8016?
To fix CVE-2020-8016, update your texlive-filesystem package to a non-vulnerable version provided by your vendor.
Where can I find more information about CVE-2020-8016?
You can find more information about CVE-2020-8016 on the OpenSUSE security announcement and the Bugzilla page.