{"id":"openSUSE-SU-2020:0368-1","aliases":[],"status":"published","title":"Security update for texlive-filesystem","description":"This update for texlive-filesystem fixes the following issues:\n\nSecurity issues fixed:\n\n- Changed default user for ls-R files and font cache directories to user nobody (bsc#1159740) \n- Switched to rm instead of safe-rm or safe-rmdir to avoid race conditions (bsc#1158910) .\n- Made cron script more failsafe (bsc#1150556)\n\nNon-security issue fixed:\n\n- Refreshed font map files on update (bsc#1155381) \n\nThis update was imported from the SUSE:SLE-15:Update update project.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2020-03-23T15:27:12Z","modified":"2020-03-23T15:27:12Z","fixes":[{"ecosystem":"openSUSE:Leap 15.1","package":"texlive-filesystem","fixed_in":["2017.135-lp151.8.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"texlive-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2017.135-lp151.8.3.1"}]}]}],"references":[{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VLNT6LCGPGLIBNA4X3SYQCIQGVKTY4FN/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1150556","tags":["report"]},{"url":"https://bugzilla.suse.com/1155381","tags":["report"]},{"url":"https://bugzilla.suse.com/1158910","tags":["report"]},{"url":"https://bugzilla.suse.com/1159740","tags":["report"]}],"sources":{"osv":[{"id":"openSUSE-SU-2020:0368-1","title":"Security update for texlive-filesystem","description":"This update for texlive-filesystem fixes the following issues:\n\nSecurity issues fixed:\n\n- Changed default user for ls-R files and font cache directories to user nobody (bsc#1159740) \n- Switched to rm instead of safe-rm or safe-rmdir to avoid race conditions (bsc#1158910) .\n- Made cron script more failsafe (bsc#1150556)\n\nNon-security issue fixed:\n\n- Refreshed font map files on update (bsc#1155381) \n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-03-23T15:27:12Z","modified":"2020-03-23T15:27:12Z","updated_at":"2026-11-02T16:58:31.152112Z"}]}}