< back to search

shield Security update for permissions

SUSE-SLE-Module-Basesystem-15-2019-3182

This update for permissions fixes the following issues: - CVE-2019-3688: Changed wrong ownership in /usr/sbin/pinger to root:squid which could have allowed a squid user to gain persistence by changing the binary (bsc#1093414). - CVE-2019-3690: Fixed a privilege escalation through untrusted symbolic links (bsc#1150734). - Fixed a regression which caused sagmentation fault (bsc#1157198).

Release Date

Dec 5 2019
References

Bugzilla: 1157198, 1093414, 1150734
CVEs: CVE-2019-3690, CVE-2019-3688
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Basesystem Module 15 aarch64

Packages

permissions
SUSE Linux Default Permissions

20180125-3.18.1 lock rpm lock src

Basesystem Module 15 ppc64le

Packages

permissions
SUSE Linux Default Permissions

20180125-3.18.1 lock rpm lock src

Basesystem Module 15 s390x

Packages

permissions
SUSE Linux Default Permissions

20180125-3.18.1 lock rpm lock src

Basesystem Module 15 x86_64

Packages

permissions
SUSE Linux Default Permissions

20180125-3.18.1 lock rpm lock src