File _patchinfo of Package patchinfo.10436

<patchinfo incident="10436">
  <issue tracker="bnc" id="1119835">VUL-0: CVE-2018-20105: yast2-rmt: CA private key passhrase exposed in log-file</issue>
  <issue tracker="bnc" id="1120672">yast2-rmt : Non-working link in help window</issue>
  <issue tracker="bnc" id="1123562">yast2-rmt : no password asked when launching from gnome-shell directly.</issue>
  <issue tracker="cve" id="2018-20105"></issue>
  <category>security</category>
  <rating>moderate</rating>
  <packager>skotov</packager>
  <description>This update for yast2-rmt to 1.2.2 fixes the following issues:

Security issue fixed:

- CVE-2018-20105: Pass SSL password to Cheetah CLI interface securely (bsc#1119835)

Non-security issues fixed:

- Launch as root from gnome-shell menu (bsc#1123562)
- Remove broken hyperlink from help (bsc#1120672)
</description>
  <summary>Security update for yast2-rmt</summary>
</patchinfo>
openSUSE Build Service is sponsored by