CVE-2020-8024

Name of the Vulnerable Software and Affected Versions hylafax+ versions prior to 7.0.2-lp152.2.1 hylafax+ version 5.6.1-lp151.3.7 and prior versions hylafax+ versions prior to 7.0.2-2.1

Description A vulnerability in the packaging of hylafax+ allows local attackers to escalate from user uucp to users calling hylafax binaries.

Recommendations For openSUSE Leap 15.2, update hylafax+ to version 7.0.2-lp152.2.1 or later. For openSUSE Leap 15.1, update hylafax+ to a version later than 5.6.1-lp151.3.7. For openSUSE Factory, update hylafax+ to version 7.0.2-2.1 or later.