http://bugzilla.suse.com/show_bug.cgi?id=1111770 http://bugzilla.suse.com/show_bug.cgi?id=1111770#c1 --- Comment #1 from Dennis Golden --- I forced /etc/os-release to be a hard link to /usr/lib/os-release. I don't know if that is the correct fix or not. Both are provided by package: openSUSE-release-15.0-lp150.129.1.x86_64. -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1111770 http://bugzilla.suse.com/show_bug.cgi?id=1111770#c4 Dennis Golden changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(dgolden@golden-co | |nsulting.com) | --- Comment #4 from Dennis Golden --- (In reply to Andreas Stieger from comment #2)

rkhunter 1.4.6 changes:

...

[...] - The 'OS_VERSION_FILE' configuration option pathname cannot be a link, but this was not checked. [...] - Handling of the '/etc/issue' file during O/S detection has now improved. Escape sequences are either replaced or removed. [...]

Reporter, please verify if 1.4.6 from security/rkhunter fixes this issue.

Sorry, I forgot to clear the needinfo flag. -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1111770 http://bugzilla.suse.com/show_bug.cgi?id=1111770#c7 --- Comment #7 from Swamp Workflow Management --- openSUSE-RU-2018:3469-1: An update that has one recommended fix can now be installed. Category: recommended (moderate) Bug References: 1111770 CVE References: Sources used: openSUSE Leap 42.3 (src): rkhunter-1.4.6-12.3.1 openSUSE Leap 15.0 (src): rkhunter-1.4.6-lp150.2.3.1 openSUSE Backports SLE-15 (src): rkhunter-1.4.6-bp150.3.3.1 -- You are receiving this mail because: You are on the CC list for the bug.