Oval Definition:	oval:org.opensuse.security:def:45689
Revision Date: 2020-12-01 Version: 1 Title: Security update for permissions (Moderate) Description: This update for permissions fixes the following issues: - CVE-2019-3688: Changed wrong ownership in /usr/sbin/pinger to root:squid which could have allowed a squid user to gain persistence by changing the binary (bsc#1093414). - CVE-2019-3690: Fixed a privilege escalation through untrusted symbolic links (bsc#1150734). - Fixed a regression which caused segmentation fault (bsc#1157198). Family: unix Class: patch Status: Reference(s): 1027353 1027519 1055478 1070737 1081164 1091107 1093414 1101820 1102775 1103276 1104139 1109663 1109847 1111122 1111657 1130721 1132256 1138459 1138748 1146068 1146211 1146212 1146213 1149792 1150734 1151781 1151782 1151783 1151784 1151785 1151786 1157198 1159913 1160968 1162972 1163019 1165631 1173466 1173467 1173469 1174157 1174543 1175259 1175664 1175665 1175671 1176012 1176072 1176382 1176896 1176931 981848 CVE-2018-1000802 CVE-2018-10903 CVE-2018-14647 CVE-2018-15173 CVE-2018-18065 CVE-2018-3646 CVE-2019-10160 CVE-2019-11070 CVE-2019-14980 CVE-2019-15139 CVE-2019-15140 CVE-2019-15141 CVE-2019-16708 CVE-2019-16709 CVE-2019-16710 CVE-2019-16711 CVE-2019-16712 CVE-2019-16713 CVE-2019-17639 CVE-2019-1787 CVE-2019-1788 CVE-2019-1789 CVE-2019-3688 CVE-2019-3690 CVE-2019-5108 CVE-2019-6201 CVE-2019-6251 CVE-2019-7285 CVE-2019-7292 CVE-2019-8503 CVE-2019-8506 CVE-2019-8515 CVE-2019-8524 CVE-2019-8535 CVE-2019-8536 CVE-2019-8544 CVE-2019-8551 CVE-2019-8558 CVE-2019-8559 CVE-2019-8563 CVE-2020-0429 CVE-2020-0431 CVE-2020-14381 CVE-2020-14386 CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14583 CVE-2020-14593 CVE-2020-14621 CVE-2020-15304 CVE-2020-15305 CVE-2020-15306 CVE-2020-15810 CVE-2020-15811 CVE-2020-1749 CVE-2020-24606 CVE-2020-25212 CVE-2020-2583 CVE-2020-2593 CVE-2020-2604 CVE-2020-2659 CVE-2020-8608 SUSE-SU-2019:0897-1 SUSE-SU-2019:1286-1 SUSE-SU-2019:2785-1 SUSE-SU-2019:3180-1 SUSE-SU-2020:0456-1 SUSE-SU-2020:2141-1 SUSE-SU-2020:2471-1 SUSE-SU-2020:2482-1 Platform(s): openSUSE Leap 15.0 openSUSE Leap 42.3 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Containers 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for High Performance Computing 15 SP1 SUSE Linux Enterprise Module for Legacy Software 15 SUSE Linux Enterprise Module for Legacy Software 15 SP1 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Web Scripting 15 SUSE Linux Enterprise Module for Web Scripting 15 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP3-ESPOS SUSE Linux Enterprise Server for SAP Applications 12 SP3-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP3-TERADATA SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP4-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND libssh2-1-1.8.0-lp150.2 is installed Definition Synopsis openSUSE Leap 42.3 is installed AND Package Information ImageMagick-6.8.8.1-32 is installed OR ImageMagick-devel-6.8.8.1-32 is installed OR ImageMagick-doc-6.8.8.1-32 is installed OR ImageMagick-extra-6.8.8.1-32 is installed OR libMagick++-6_Q16-3-6.8.8.1-32 is installed OR libMagickCore-6_Q16-1-6.8.8.1-32 is installed OR libMagickWand-6_Q16-1-6.8.8.1-32 is installed OR perl-PerlMagick-6.8.8.1-32 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information finch-2.6.6-0.19 is installed OR libpurple-2.6.6-0.19 is installed OR libpurple-lang-2.6.6-0.19 is installed OR libpurple-meanwhile-2.6.6-0.19 is installed OR libpurple-tcl-2.6.6-0.19 is installed OR pidgin-2.6.6-0.19 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information bind-libs-9.9.4P2-0.6 is installed OR bind-libs-32bit-9.9.4P2-0.6 is installed OR bind-utils-9.9.4P2-0.6 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information java-1_7_0-openjdk-1.7.0.99-0.20 is installed OR java-1_7_0-openjdk-demo-1.7.0.99-0.20 is installed OR java-1_7_0-openjdk-devel-1.7.0.99-0.20 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information aaa_base-13.2+git20140911.61c1681-1 is installed OR aaa_base-extras-13.2+git20140911.61c1681-1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND binutils-2.25.0-13 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information file-5.19-9 is installed OR file-magic-5.19-9 is installed OR libmagic1-5.19-9 is installed OR libmagic1-32bit-5.19-9 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information accountsservice-0.6.42-14 is installed OR accountsservice-lang-0.6.42-14 is installed OR libaccountsservice0-0.6.42-14 is installed OR typelib-1_0-AccountsService-1_0-0.6.42-14 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information alsa-1.0.27.2-15 is installed OR libasound2-1.0.27.2-15 is installed OR libasound2-32bit-1.0.27.2-15 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 is installed AND Package Information kernel-firmware-20180416-1 is installed OR ucode-amd-20180416-1 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed AND axis-1.4-5.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Containers 15 SP1 is installed AND containerd-1.2.2-5.9 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 is installed AND Package Information libplist++-devel-2.0.0-1 is installed OR libplist++3-2.0.0-1 is installed OR libplist-devel-2.0.0-1 is installed OR libplist3-2.0.0-1 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed AND Package Information libmad-devel-0.15.1b-3 is installed OR libmad0-0.15.1b-3 is installed Definition Synopsis SUSE Linux Enterprise Module for Development Tools 15 is installed AND Package Information bsh2-2.0.0.b6-3 is installed OR bsh2-classgen-2.0.0.b6-3 is installed OR bsh2-javadoc-2.0.0.b6-3 is installed Definition Synopsis SUSE Linux Enterprise Module for High Performance Computing 15 SP1 is installed AND Package Information libpmi0-18.08.8-3.4 is installed OR libslurm33-18.08.8-3.4 is installed OR perl-Switch-2.17-3.2 is installed OR perl-slurm-18.08.8-3.4 is installed OR slurm-18.08.8-3.4 is installed OR slurm-auth-none-18.08.8-3.4 is installed OR slurm-config-18.08.8-3.4 is installed OR slurm-config-man-18.08.8-3.4 is installed OR slurm-devel-18.08.8-3.4 is installed OR slurm-doc-18.08.8-3.4 is installed OR slurm-lua-18.08.8-3.4 is installed OR slurm-munge-18.08.8-3.4 is installed OR slurm-node-18.08.8-3.4 is installed OR slurm-pam_slurm-18.08.8-3.4 is installed OR slurm-plugins-18.08.8-3.4 is installed OR slurm-slurmdbd-18.08.8-3.4 is installed OR slurm-sql-18.08.8-3.4 is installed OR slurm-sview-18.08.8-3.4 is installed OR slurm-torque-18.08.8-3.4 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 is installed AND Package Information kernel-default-4.12.14-25.3 is installed OR reiserfs-kmp-default-4.12.14-25.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 SP1 is installed AND Package Information java-1_8_0-openjdk-1.8.0.242-3.30 is installed OR java-1_8_0-openjdk-demo-1.8.0.242-3.30 is installed OR java-1_8_0-openjdk-devel-1.8.0.242-3.30 is installed OR java-1_8_0-openjdk-headless-1.8.0.242-3.30 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 is installed AND Package Information kernel-livepatch-4_12_14-150_17-default-6-2 is installed OR kernel-livepatch-SLE15_Update_10-6-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND Package Information kernel-livepatch-4_12_14-197_21-default-5-2 is installed OR kernel-livepatch-SLE15-SP1_Update_6-5-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 is installed AND Package Information binutils-2.32-6.8 is installed OR binutils-gold-2.32-6.8 is installed OR cross-arm-binutils-2.32-6.8 is installed OR cross-avr-binutils-2.32-6.8 is installed OR cross-epiphany-binutils-2.32-6.8 is installed OR cross-hppa-binutils-2.32-6.8 is installed OR cross-hppa64-binutils-2.32-6.8 is installed OR cross-i386-binutils-2.32-6.8 is installed OR cross-ia64-binutils-2.32-6.8 is installed OR cross-m68k-binutils-2.32-6.8 is installed OR cross-mips-binutils-2.32-6.8 is installed OR cross-ppc-binutils-2.32-6.8 is installed OR cross-ppc64-binutils-2.32-6.8 is installed OR cross-riscv64-binutils-2.32-6.8 is installed OR cross-rx-binutils-2.32-6.8 is installed OR cross-s390-binutils-2.32-6.8 is installed OR cross-sparc-binutils-2.32-6.8 is installed OR cross-sparc64-binutils-2.32-6.8 is installed OR cross-spu-binutils-2.32-6.8 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed AND Package Information libqb-1.0.3+20190326.a521604-3.3 is installed OR libqb-devel-32bit-1.0.3+20190326.a521604-3.3 is installed OR libqb20-32bit-1.0.3+20190326.a521604-3.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed AND Package Information rmt-server-2.5.7-3.15 is installed OR rmt-server-pubcloud-2.5.7-3.15 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 is installed AND Package Information xen-4.10.4_06-3.25 is installed OR xen-devel-4.10.4_06-3.25 is installed OR xen-tools-4.10.4_06-3.25 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed AND Package Information rsyslog-8.33.1-3.22 is installed OR rsyslog-module-gssapi-8.33.1-3.22 is installed OR rsyslog-module-gtls-8.33.1-3.22 is installed OR rsyslog-module-mmnormalize-8.33.1-3.22 is installed OR rsyslog-module-mysql-8.33.1-3.22 is installed OR rsyslog-module-pgsql-8.33.1-3.22 is installed OR rsyslog-module-relp-8.33.1-3.22 is installed OR rsyslog-module-snmp-8.33.1-3.22 is installed OR rsyslog-module-udpspoof-8.33.1-3.22 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 is installed AND Package Information nodejs8-8.17.0-3.25 is installed OR nodejs8-devel-8.17.0-3.25 is installed OR nodejs8-docs-8.17.0-3.25 is installed OR npm8-8.17.0-3.25 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 SP1 is installed AND Package Information nodejs8-8.16.1-3.20 is installed OR nodejs8-devel-8.16.1-3.20 is installed OR nodejs8-docs-8.16.1-3.20 is installed OR npm8-8.16.1-3.20 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND p7zip-9.20.1-7.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND wpa_supplicant-2.6-15.10 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information libsystemd0-228-150.58 is installed OR libsystemd0-32bit-228-150.58 is installed OR libudev1-228-150.58 is installed OR libudev1-32bit-228-150.58 is installed OR systemd-228-150.58 is installed OR systemd-32bit-228-150.58 is installed OR systemd-bash-completion-228-150.58 is installed OR systemd-sysvinit-228-150.58 is installed OR udev-228-150.58 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information kgraft-patch-4_4_74-92_38-default-12-2 is installed OR kgraft-patch-SLE12-SP2_Update_13-12-2 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP3 is installed AND clamav-0.100.3-33.21 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed AND clamav-0.100.3-33.21 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information bzip2-1.0.6-29 is installed OR bzip2-doc-1.0.6-29 is installed OR libbz2-1-1.0.6-29 is installed OR libbz2-1-32bit-1.0.6-29 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND kgraft-patch-4_4_180-94_121-default-3-2 is installed OR kgraft-patch-SLE12-SP3_Update_32-3-2 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP3-ESPOS is installed AND kgraft-patch-4_4_180-94_121-default-3-2 is installed OR kgraft-patch-SLE12-SP3_Update_32-3-2 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND permissions-2015.09.28.1626-17.20 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP3-LTSS is installed AND permissions-2015.09.28.1626-17.20 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND xen-4.9.2_10-3.41 is installed OR xen-doc-html-4.9.2_10-3.41 is installed OR xen-libs-4.9.2_10-3.41 is installed OR xen-libs-32bit-4.9.2_10-3.41 is installed OR xen-tools-4.9.2_10-3.41 is installed OR xen-tools-domU-4.9.2_10-3.41 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP3-TERADATA is installed AND xen-4.9.2_10-3.41 is installed OR xen-doc-html-4.9.2_10-3.41 is installed OR xen-libs-4.9.2_10-3.41 is installed OR xen-libs-32bit-4.9.2_10-3.41 is installed OR xen-tools-4.9.2_10-3.41 is installed OR xen-tools-domU-4.9.2_10-3.41 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information apache2-2.4.23-29.21 is installed OR apache2-doc-2.4.23-29.21 is installed OR apache2-example-pages-2.4.23-29.21 is installed OR apache2-prefork-2.4.23-29.21 is installed OR apache2-utils-2.4.23-29.21 is installed OR apache2-worker-2.4.23-29.21 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP4 is installed AND nmap-6.46-3.3 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed AND nmap-6.46-3.3 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP4-LTSS is installed AND xen-4.11.4_06-2.33 is installed OR xen-doc-html-4.11.4_06-2.33 is installed OR xen-libs-4.11.4_06-2.33 is installed OR xen-libs-32bit-4.11.4_06-2.33 is installed OR xen-tools-4.11.4_06-2.33 is installed OR xen-tools-domU-4.11.4_06-2.33 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP4-LTSS is installed AND xen-4.11.4_06-2.33 is installed OR xen-doc-html-4.11.4_06-2.33 is installed OR xen-libs-4.11.4_06-2.33 is installed OR xen-libs-32bit-4.11.4_06-2.33 is installed OR xen-tools-4.11.4_06-2.33 is installed OR xen-tools-domU-4.11.4_06-2.33 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP5 is installed AND perl-5.18.2-12.23 is installed OR perl-32bit-5.18.2-12.23 is installed OR perl-base-5.18.2-12.23 is installed OR perl-doc-5.18.2-12.23 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed AND perl-5.18.2-12.23 is installed OR perl-32bit-5.18.2-12.23 is installed OR perl-base-5.18.2-12.23 is installed OR perl-doc-5.18.2-12.23 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND Package Information flash-player-11.2.202.440-31 is installed OR flash-player-gnome-11.2.202.440-31 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND Package Information ImageMagick-6.8.8.1-30 is installed OR libMagick++-6_Q16-3-6.8.8.1-30 is installed OR libMagickCore-6_Q16-1-32bit-6.8.8.1-30 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND Package Information libuuid-devel-2.28-44.3 is installed OR util-linux-2.28-44.3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND Package Information ImageMagick-6.8.8.1-71.5 is installed OR libMagick++-6_Q16-3-6.8.8.1-71.5 is installed OR libMagickCore-6_Q16-1-32bit-6.8.8.1-71.5 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND Package Information kernel-default-4.12.14-95.3 is installed OR kernel-default-extra-4.12.14-95.3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP5 is installed AND Package Information bluez-5.13-5.15 is installed OR bluez-cups-5.13-5.15 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information PackageKit-gstreamer-plugin-1.1.10-2 is installed OR PackageKit-gtk3-module-1.1.10-2 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND Package Information kernel-default-4.12.14-197.7 is installed OR kernel-default-extra-4.12.14-197.7 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND ansible-2.4.6.0-3.3 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND ansible-2.4.6.0-3.3 is installed
BACK