Oval Definition:oval:org.opensuse.security:def:65100
Revision Date:2020-12-01Version:1
Title:Security update for permissions (Moderate)
Description:

This update for permissions fixes the following issues:

Security issues fixed:

- CVE-2019-3687: Fixed a privilege escalation which could allow a local user to read network traffic if wireshark is installed (bsc#1148788) - CVE-2020-8013: Fixed an issue where chkstat set unintended setuid/capabilities for mrsh and wodim (bsc#1163922).

Non-security issues fixed:

- Fixed a regression where chkstat breaks without /proc available (bsc#1160764, bsc#1160594). - Fixed capability handling when doing multiple permission changes at once (bsc#1161779).
Family:unixClass:patch
Status:Reference(s):1027519
1100352
1129715
1137526
1148788
1154064
1160594
1160764
1161779
1163922
1177950
1178591
CVE-2018-13301
CVE-2019-12730
CVE-2019-17542
CVE-2019-3687
CVE-2019-9718
CVE-2020-28368
CVE-2020-8013
SUSE-SU-2019:3184-1
SUSE-SU-2020:0547-1
Platform(s):openSUSE Leap 15.2
SUSE Linux Enterprise Module for Basesystem 15 SP1
SUSE Linux Enterprise Module for Desktop Applications 15 SP1
Product(s):
Definition Synopsis
  • openSUSE Leap 15.2 is installed
  • AND Package Information
  • xen-4.13.2_02-lp152.2.15 is installed
  • OR xen-devel-4.13.2_02-lp152.2.15 is installed
  • OR xen-doc-html-4.13.2_02-lp152.2.15 is installed
  • OR xen-libs-4.13.2_02-lp152.2.15 is installed
  • OR xen-libs-32bit-4.13.2_02-lp152.2.15 is installed
  • OR xen-tools-4.13.2_02-lp152.2.15 is installed
  • OR xen-tools-domU-4.13.2_02-lp152.2.15 is installed
  • OR xen-tools-xendomains-wait-disk-4.13.2_02-lp152.2.15 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed
  • AND Package Information
  • permissions-20181116-9.23 is installed
  • OR permissions-zypp-plugin-20181116-9.23 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed
  • AND Package Information
  • ffmpeg-3.4.2-4.27 is installed
  • OR libavcodec57-3.4.2-4.27 is installed
  • OR libavutil-devel-3.4.2-4.27 is installed
  • OR libavutil55-3.4.2-4.27 is installed
  • OR libpostproc-devel-3.4.2-4.27 is installed
  • OR libpostproc54-3.4.2-4.27 is installed
  • OR libswresample-devel-3.4.2-4.27 is installed
  • OR libswresample2-3.4.2-4.27 is installed
  • OR libswscale-devel-3.4.2-4.27 is installed
  • OR libswscale4-3.4.2-4.27 is installed
  • BACK