File _patchinfo of Package patchinfo.13854
<patchinfo incident="13854"> <issue tracker="bnc" id="1154063">AUDIT-FIND: avahi-autoipd: LPE via recursive chown in %post</issue> <packager>mgorse</packager> <rating>moderate</rating> <category>recommended</category> <summary>Recommended update for avahi</summary> <description>This update for avahi fixes the following issues: - When changing ownership of /var/lib/autoipd, only change ownership of files owned by avahi, to mitigate against possible exploits (bsc#1154063). This update was imported from the SUSE:SLE-15-SP1:Update update project.</description> </patchinfo>