< back to search

shield Security update for permissions

SUSE-SLE-Module-Basesystem-15-SP1-2019-3181

This update for permissions fixes the following issues: - CVE-2019-3688: Changed wrong ownership in /usr/sbin/pinger to root:squid which could have allowed a squid user to gain persistence by changing the binary (bsc#1093414). - CVE-2019-3690: Fixed a privilege escalation through untrusted symbolic links (bsc#1150734). - Fixed a regression which caused sagmentation fault (bsc#1157198).

Release Date

Dec 5 2019
References

Bugzilla: 1157198, 1150734, 1093414
CVEs: CVE-2019-3688, CVE-2019-3690
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Basesystem Module 15.1 aarch64

Packages

permissions
SUSE Linux Default Permissions

20181116-9.12.1 lock rpm lock src

permissions-zypp-plugin
A zypper commit plugin for calling chkstat

20181116-9.12.1 lock rpm

Basesystem Module 15.1 ppc64le

Packages

permissions
SUSE Linux Default Permissions

20181116-9.12.1 lock rpm lock src

permissions-zypp-plugin
A zypper commit plugin for calling chkstat

20181116-9.12.1 lock rpm

Basesystem Module 15.1 s390x

Packages

permissions
SUSE Linux Default Permissions

20181116-9.12.1 lock rpm lock src

permissions-zypp-plugin
A zypper commit plugin for calling chkstat

20181116-9.12.1 lock rpm

Basesystem Module 15.1 x86_64

Packages

permissions
SUSE Linux Default Permissions

20181116-9.12.1 lock rpm lock src

permissions-zypp-plugin
A zypper commit plugin for calling chkstat

20181116-9.12.1 lock rpm