Description
`PluginScript` attempts to `chroot` the plugin to the `repoManagerRoot`, this root is frequently `/` (the system root) in standard configurations or when using `--root`. If the chroot target is `/`, it is a no-op, allowing the traversed path to execute host binaries (like `/bin/bash`) with root privileges.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
SUSE SUSE Linux Enterprise
Default version status: unaffected
17.38.8 to < 17.38.9affected
SUSE openSUSE
Default version status: unaffected
17.38.8 to < 17.38.9affected