SUSE-SU-2020:0519-1: moderate: Security update for texlive-filesystem

[sle-updates at lists.suse.com]

   SUSE Security Update: Security update for texlive-filesystem
______________________________________________________________________________

Announcement ID:    SUSE-SU-2020:0519-1
Rating:             moderate
References:         #1150556 #1155381 #1158910 #1159740 
Affected Products:
                    SUSE Linux Enterprise Module for Desktop Applications 15-SP1
______________________________________________________________________________

   An update that contains security fixes can now be installed.

Description:

   This update for texlive-filesystem fixes the following issues:

   Security issues fixed:

   - Changed default user for ls-R files and font cache directories to user
     nobody (bsc#1159740)
   - Switched to rm instead of safe-rm or safe-rmdir to avoid race conditions
     (bsc#1158910) .
   - Made cron script more failsafe (bsc#1150556)

   Non-security issue fixed:

   - Refreshed font map files on update (bsc#1155381)


Patch Instructions:

   To install this SUSE Security Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Module for Desktop Applications 15-SP1:

      zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP1-2020-519=1



Package List:

   - SUSE Linux Enterprise Module for Desktop Applications 15-SP1 (noarch):

      texlive-collection-basic-2017.135.svn41616-9.5.1
      texlive-collection-bibtexextra-2017.135.svn44385-9.5.1
      texlive-collection-binextra-2017.135.svn44515-9.5.1
      texlive-collection-context-2017.135.svn42330-9.5.1
      texlive-collection-fontsextra-2017.135.svn43356-9.5.1
      texlive-collection-fontsrecommended-2017.135.svn35830-9.5.1
      texlive-collection-fontutils-2017.135.svn37105-9.5.1
      texlive-collection-formatsextra-2017.135.svn44177-9.5.1
      texlive-collection-games-2017.135.svn42992-9.5.1
      texlive-collection-humanities-2017.135.svn42268-9.5.1
      texlive-collection-langarabic-2017.135.svn44496-9.5.1
      texlive-collection-langchinese-2017.135.svn42675-9.5.1
      texlive-collection-langcjk-2017.135.svn43009-9.5.1
      texlive-collection-langcyrillic-2017.135.svn44401-9.5.1
      texlive-collection-langczechslovak-2017.135.svn32550-9.5.1
      texlive-collection-langenglish-2017.135.svn43650-9.5.1
      texlive-collection-langeuropean-2017.135.svn44414-9.5.1
      texlive-collection-langfrench-2017.135.svn40375-9.5.1
      texlive-collection-langgerman-2017.135.svn42045-9.5.1
      texlive-collection-langgreek-2017.135.svn44192-9.5.1
      texlive-collection-langitalian-2017.135.svn30372-9.5.1
      texlive-collection-langjapanese-2017.135.svn44554-9.5.1
      texlive-collection-langkorean-2017.135.svn42106-9.5.1
      texlive-collection-langother-2017.135.svn44414-9.5.1
      texlive-collection-langpolish-2017.135.svn44371-9.5.1
      texlive-collection-langportuguese-2017.135.svn30962-9.5.1
      texlive-collection-langspanish-2017.135.svn40587-9.5.1
      texlive-collection-latex-2017.135.svn41614-9.5.1
      texlive-collection-latexextra-2017.135.svn44544-9.5.1
      texlive-collection-latexrecommended-2017.135.svn44177-9.5.1
      texlive-collection-luatex-2017.135.svn44500-9.5.1
      texlive-collection-mathscience-2017.135.svn44396-9.5.1
      texlive-collection-metapost-2017.135.svn44297-9.5.1
      texlive-collection-music-2017.135.svn40561-9.5.1
      texlive-collection-pictures-2017.135.svn44395-9.5.1
      texlive-collection-plaingeneric-2017.135.svn44177-9.5.1
      texlive-collection-pstricks-2017.135.svn44460-9.5.1
      texlive-collection-publishers-2017.135.svn44485-9.5.1
      texlive-collection-xetex-2017.135.svn43059-9.5.1
      texlive-devel-2017.135-9.5.1
      texlive-extratools-2017.135-9.5.1
      texlive-filesystem-2017.135-9.5.1
      texlive-scheme-basic-2017.135.svn25923-9.5.1
      texlive-scheme-context-2017.135.svn35799-9.5.1
      texlive-scheme-full-2017.135.svn44177-9.5.1
      texlive-scheme-gust-2017.135.svn44177-9.5.1
      texlive-scheme-infraonly-2017.135.svn41515-9.5.1
      texlive-scheme-medium-2017.135.svn44177-9.5.1
      texlive-scheme-minimal-2017.135.svn13822-9.5.1
      texlive-scheme-small-2017.135.svn41825-9.5.1
      texlive-scheme-tetex-2017.135.svn44187-9.5.1


References:

   https://bugzilla.suse.com/1150556
   https://bugzilla.suse.com/1155381
   https://bugzilla.suse.com/1158910
   https://bugzilla.suse.com/1159740