{"id":"SUSE-SU-2021:0182-1","summary":"Security update for yast2-multipath","details":"This update for yast2-multipath to version 3.1.9 fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-17955: Use random file name instead of static names (bsc#1117592).\n\nNon-security issue fixed:\n\n- Removed calls to /sbin/insserv (bsc#1026027).\n","modified":"2025-05-02T04:29:54.293131Z","published":"2021-01-21T06:35:14Z","related":["CVE-2018-17955"],"upstream":["CVE-2018-17955"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210182-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1026027"},{"type":"REPORT","url":"https://bugzilla.suse.com/1117592"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-17955"}],"affected":[{"package":{"name":"yast2-multipath","ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP2","purl":"pkg:rpm/suse/yast2-multipath&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2012%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.9-12.3.45"}]}],"ecosystem_specific":{"binaries":[{"yast2-multipath":"3.1.9-12.3.45"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:0182-1.json"}}],"schema_version":"1.7.3"}