CVE:CVE-2018-20105
CNNVD:CNNVD-201903-630
yast-rmt是一款用于配置存储库镜像工具（RMT）的YaST模块。
yast-rmt中存在安全漏洞。攻击者可利用该漏洞绕过限制，提升权限。
solution:Upgrade yast2-rmt_project yast2-rmt to a higher version than 1.2.2,and avoid the version (,1.2.2); Upgrade opensuse leap to a higher version than 15.0,and avoid the version 15.0; Upgrade suse suse_linux_enterprise_server to a higher version than 15,and avoid the version 15