shield Security update for permissions

SUSE-SLE-SAP-12-SP2-2019-3180

This update for permissions fixes the following issues: - CVE-2019-3688: Changed wrong ownership in /usr/sbin/pinger to root:squid which could have allowed a squid user to gain persistence by changing the binary (bsc#1093414). - CVE-2019-3690: Fixed a privilege escalation through untrusted symbolic links (bsc#1150734). - Fixed a regression which caused segmentation fault (bsc#1157198).

• Release Date
  Dec 5 2019
• References
  Bugzilla: 1150734, 1093414, 1157198
  CVEs: CVE-2019-3690, CVE-2019-3688
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12.2 ppc64le

• Packages
  permissions
  SUSE Linux Default Permissions

  2015.09.28.1626-17.20.1

  lock rpm

  lock src

SUSE Linux Enterprise Server for SAP Applications 12.2 x86_64

• Packages
  permissions
  SUSE Linux Default Permissions

  2015.09.28.1626-17.20.1

  lock rpm

  lock src