{"affected":[{"ecosystem_specific":{"binaries":[{"yast2-multipath":"3.2.2-3.3.30"}]},"package":{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP3","name":"yast2-multipath","purl":"pkg:rpm/suse/yast2-multipath&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2012%20SP3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"3.2.2-3.3.30"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"yast2-multipath":"3.2.2-3.3.30"}]},"package":{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP4","name":"yast2-multipath","purl":"pkg:rpm/suse/yast2-multipath&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2012%20SP4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"3.2.2-3.3.30"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"yast2-multipath":"3.2.2-3.3.30"}]},"package":{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP5","name":"yast2-multipath","purl":"pkg:rpm/suse/yast2-multipath&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2012%20SP5"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"3.2.2-3.3.30"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for yast2-multipath to version 3.2.2 fixes the following issues:\n\n- CVE-2018-17955: Use random file name instead of static names (bsc#1117592).\n","id":"SUSE-SU-2020:3231-1","modified":"2020-11-06T14:36:37Z","published":"2020-11-06T14:36:37Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203231-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1117592"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-17955"}],"related":["CVE-2018-17955"],"summary":"Security update for yast2-multipath","upstream":["CVE-2018-17955"]}