shield Security update for permissions

SUSE-SLE-Module-Basesystem-15-SP1-2020-547

This update for permissions fixes the following issues: Security issues fixed: - CVE-2019-3687: Fixed a privilege escalation which could allow a local user to read network traffic if wireshark is installed (bsc#1148788) - CVE-2020-8013: Fixed an issue where chkstat set unintended setuid/capabilities for mrsh and wodim (bsc#1163922). Non-security issues fixed: - Fixed a regression where chkstat breaks without /proc available (bsc#1160764, bsc#1160594). - Fixed capability handling when doing multiple permission changes at once (bsc#1161779).

Release Date

Feb 28 2020
References

Bugzilla: 1148788, 1160594, 1160764, 1161779, 1163922
CVEs: CVE-2019-3687, CVE-2020-8013
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Basesystem Module 15.1 s390x

Packages

permissions
SUSE Linux Default Permissions

20181116-9.23.1 lock rpm lock src

permissions-zypp-plugin
A zypper commit plugin for calling chkstat

20181116-9.23.1 lock rpm

Basesystem Module 15.1 aarch64

Packages

permissions
SUSE Linux Default Permissions

20181116-9.23.1 lock rpm lock src

permissions-zypp-plugin
A zypper commit plugin for calling chkstat

20181116-9.23.1 lock rpm

Basesystem Module 15.1 ppc64le

Packages

permissions
SUSE Linux Default Permissions

20181116-9.23.1 lock rpm lock src

permissions-zypp-plugin
A zypper commit plugin for calling chkstat

20181116-9.23.1 lock rpm

Basesystem Module 15.1 x86_64

Packages

permissions
SUSE Linux Default Permissions

20181116-9.23.1 lock rpm lock src

permissions-zypp-plugin
A zypper commit plugin for calling chkstat

20181116-9.23.1 lock rpm