[Bug 1131707] VUL-1: CVE-2019-10868: tryton: an authenticated user can order records based on a field for which he has no access

http://bugzilla.suse.com/show_bug.cgi?id=1131707 http://bugzilla.suse.com/show_bug.cgi?id=1131707#c9 --- Comment #9 from Swamp Workflow Management <swamp@suse.de> --- openSUSE-RU-2019:1335-1: An update that fixes one vulnerability is now available. Category: recommended (low) Bug References: 1131707 CVE References: CVE-2019-10868 Sources used: openSUSE Leap 15.0 (src): tryton-4.2.24-lp150.2.18.1 -- You are receiving this mail because: You are on the CC list for the bug.