CVE-2020-8016
race condition in the packaging of texlive-filesysten
A Race Condition Enabling Link Following vulnerability in the packaging of texlive-filesystem of SUSE Linux Enterprise Module for Desktop Applications 15-SP1, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1 allows local users to corrupt files or potentially escalate privileges. This issue affects: SUSE Linux Enterprise Module for Desktop Applications 15-SP1 texlive-filesystem versions prior to 2017.135-9.5.1. SUSE Linux Enterprise Software Development Kit 12-SP4 texlive-filesystem versions prior to 2013.74-16.5.1. SUSE Linux Enterprise Software Development Kit 12-SP5 texlive-filesystem versions prior to 2013.74-16.5.1. openSUSE Leap 15.1 texlive-filesystem versions prior to 2017.135-lp151.8.3.1.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
race condition in the packaging of texlive-filesysten
A Race Condition Enabling Link Following vulnerability in the packaging of texlive-filesystem of SUSE Linux Enterprise Module for Desktop Applications 15-SP1, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1 allows local users to corrupt files or potentially escalate privileges. This issue affects: SUSE Linux Enterprise Module for Desktop Applications 15-SP1 texlive-filesystem versions prior to 2017.135-9.5.1. SUSE Linux Enterprise Software Development Kit 12-SP4 texlive-filesystem versions prior to 2013.74-16.5.1. SUSE Linux Enterprise Software Development Kit 12-SP5 texlive-filesystem versions prior to 2013.74-16.5.1. openSUSE Leap 15.1 texlive-filesystem versions prior to 2017.135-lp151.8.3.1.
- Record
CVE-2020-8016- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L - Weakness
- CWE-367
- Updated
- 2026-11-02
EUVDEUVD-2020-28929
A Race Condition Enabling Link Following vulnerability in the packaging of texlive-filesystem of SUSE Linux Enterprise Module for Desktop Applications 15-SP1, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1 allows local users to corrupt files or potentially escalate privileges. This issue affects: SUSE Linux Enterprise Module for Desktop Applications 15-SP1 texlive-filesystem versions prior to 2017.135-9.5.1. SUSE Linux Enterprise Software Development Kit 12-SP4 texlive-filesystem versions prior to 2013.74-16.5.1. SUSE Linux Enterprise Software Development Kit 12-SP5 texlive-filesystem versions prior to 2013.74-16.5.1. openSUSE Leap 15.1 texlive-filesystem versions prior to 2017.135-lp151.8.3.1.
- Record
EUVD-2020-28929- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gw5h-q2x4-wff3
A Race Condition Enabling Link Following vulnerability in the packaging of texlive-filesystem of...
A Race Condition Enabling Link Following vulnerability in the packaging of texlive-filesystem of SUSE Linux Enterprise Module for Desktop Applications 15-SP1, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1 allows local users to corrupt files or potentially escalate privileges. This issue affects: SUSE Linux Enterprise Module for Desktop Applications 15-SP1 texlive-filesystem versions prior to 2017.135-9.5.1. SUSE Linux Enterprise Software Development Kit 12-SP4 texlive-filesystem versions prior to 2013.74-16.5.1. SUSE Linux Enterprise Software Development Kit 12-SP5 texlive-filesystem versions prior to 2013.74-16.5.1. openSUSE Leap 15.1 texlive-filesystem versions prior to 2017.135-lp151.8.3.1.
- Record
GHSA-gw5h-q2x4-wff3- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-367
- Updated
- 2026-11-02
NVD
A Race Condition Enabling Link Following vulnerability in the packaging of texlive-filesystem of SUSE Linux Enterprise Module for Desktop Applications 15-SP1, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1 allows local users to corrupt files or potentially escalate privileges. This issue affects: SUSE Linux Enterprise Module for Desktop Applications 15-SP1 texlive-filesystem versions prior to 2017.135-9.5.1. SUSE Linux Enterprise Software Development Kit 12-SP4 texlive-filesystem versions prior to 2013.74-16.5.1. SUSE Linux Enterprise Software Development Kit 12-SP5 texlive-filesystem versions prior to 2013.74-16.5.1. openSUSE Leap 15.1 texlive-filesystem versions prior to 2017.135-lp151.8.3.1.
- Record
CVE-2020-8016- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L - CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 4.4 Medium
AV:L/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-367
- Updated
- 2026-11-02
OSVopenSUSE-SU-2020:0804-1 No score
Security update for texlive-filesystem
This update for texlive-filesystem fixes the following issues:
Security issues fixed:
- CVE-2020-8016: Fixed a race condition in the spec file (bsc#1159740).
- CVE-2020-8017: Fixed a race condition on a cron job (bsc#1158910).
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2020:0804-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11431-1 No score
libkpathsea6-6.3.3-76.3 on GA media
These are all security issues fixed in the libkpathsea6-6.3.3-76.3 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11431-1- Updated
- 2026-11-02
Show 4 moreShow less
OSVopenSUSE-SU-2024:11432-1 No score
texlive-collection-basic-2021.185.svn56569-52.2 on GA media
These are all security issues fixed in the texlive-collection-basic-2021.185.svn56569-52.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11432-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:1580-1 No score
Security update for texlive-filesystem
This update for texlive-filesystem fixes the following issues:
Security issues fixed:
- CVE-2020-8016: Fixed a race condition in the spec file (bsc#1159740).
- CVE-2020-8017: Fixed a race condition on a cron job (bsc#1158910).
- Record
SUSE-SU-2020:1580-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:1580-2 No score
Security update for texlive-filesystem
This update for texlive-filesystem fixes the following issues:
Security issues fixed:
- CVE-2020-8016: Fixed a race condition in the spec file (bsc#1159740).
- CVE-2020-8017: Fixed a race condition on a cron job (bsc#1158910).
- Record
SUSE-SU-2020:1580-2- Updated
- 2026-11-02
OSVSUSE-SU-2020:1581-1 No score
Security update for texlive
This update for texlive fixes the following issues:
Security issues fixed:
- CVE-2020-8016: Fixed a race condition in the spec file (bsc#1159740).
- CVE-2020-8017: Fixed a race condition on a cron job (bsc#1158910).
- Fixed an issue where pstopdf was crashing (bsc#1138793).
- Record
SUSE-SU-2020:1581-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
texliveSUSE:Linux Enterprise Module for Desktop Applications 15 SP1 From an advisory covering 2 CVEs |
before 2017.20170520-11.13.2 | 2017.20170520-11.13.2 |
texlive-filesystemSUSE:Linux Enterprise Module for Desktop Applications 15 SP1 From an advisory covering 2 CVEs |
before 2017.135-9.12.1 | 2017.135-9.12.1 |
texlive-filesystemSUSE:Linux Enterprise Module for Desktop Applications 15 SP2 From an advisory covering 2 CVEs |
before 2017.135-9.12.1 | 2017.135-9.12.1 |
texliveSUSE:Linux Enterprise Software Development Kit 12 SP4 From an advisory covering 2 CVEs |
before 2013.20130620-22.8.2 | 2013.20130620-22.8.2 |
texlive-filesystemSUSE:Linux Enterprise Software Development Kit 12 SP4 From an advisory covering 2 CVEs |
before 2013.74-16.12.1 | 2013.74-16.12.1 |
texliveSUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 2 CVEs |
before 2013.20130620-22.8.2 | 2013.20130620-22.8.2 |
texlive-filesystemSUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 2 CVEs |
before 2013.74-16.12.1 | 2013.74-16.12.1 |
texliveSUSE:Linux Enterprise Server 12 SP4 From an advisory covering 2 CVEs |
before 2013.20130620-22.8.2 | 2013.20130620-22.8.2 |
texliveSUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 2 CVEs |
before 2013.20130620-22.8.2 | 2013.20130620-22.8.2 |
texliveSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 2 CVEs |
before 2013.20130620-22.8.2 | 2013.20130620-22.8.2 |
Show 5 moreShow less
| Package | Affected | Fixed |
|---|---|---|
texliveSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 2 CVEs |
before 2013.20130620-22.8.2 | 2013.20130620-22.8.2 |
texliveopenSUSE:Leap 15.1 From an advisory covering 2 CVEs |
before 2017.20170520-lp151.12.3.1 | 2017.20170520-lp151.12.3.1 |
texlive-filesystemopenSUSE:Leap 15.1 From an advisory covering 2 CVEs |
before 2017.135-lp151.8.6.1 | 2017.135-lp151.8.6.1 |
texliveopenSUSE:Tumbleweed From an advisory covering 4 CVEs |
before 2021.20210325.svn34398-76.3 | 2021.20210325.svn34398-76.3 |
texlive-filesystemopenSUSE:Tumbleweed From an advisory covering 2 CVEs |
before 2021.185.svn54495-52.2 | 2021.185.svn54495-52.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-8016 is a medium vulnerability (CVSS 4.9) in Opensuse Leap 15.1, published April 2, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.29%, the 21st percentile. No source names a fixed version.
References
lists.opensuse.org/opensuse-security-announce/2020-06/msg00021.html
bugzilla.suse.com/show_bug.cgi?id=1159740
nvd.nist.gov/vuln/detail/CVE-2020-8016
github.com/advisories/GHSA-gw5h-q2x4-wff3
suse.com/support/update/announcement/2020/suse-su-20201580-1
Show 10 moreShow less