Oval Definition:oval:org.opensuse.security:def:68447
Revision Date:2020-12-01Version:1
Title:Security update for permissions (Moderate)
Description:

This update for permissions fixes the following issues:

Security issues fixed:

- CVE-2019-3687: Fixed a privilege escalation which could allow a local user to read network traffic if wireshark is installed (bsc#1148788) - CVE-2020-8013: Fixed an issue where chkstat set unintended setuid/capabilities for mrsh and wodim (bsc#1163922).

Non-security issues fixed:

- Fixed a regression where chkstat breaks without /proc available (bsc#1160764, bsc#1160594). - Fixed capability handling when doing multiple permission changes at once (bsc#1161779).
Family:unixClass:patch
Status:Reference(s):1148788
1160594
1160764
1161779
1163922
1172225
CVE-2019-20807
CVE-2019-3687
CVE-2020-8013
SUSE-SU-2020:0547-1
SUSE-SU-2020:1551-1
Platform(s):SUSE Linux Enterprise Module for Basesystem 15 SP1
SUSE Linux Enterprise Module for Desktop Applications 15 SP1
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed
  • AND Package Information
  • permissions-20181116-9.23 is installed
  • OR permissions-zypp-plugin-20181116-9.23 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed
  • AND Package Information
  • gvim-8.0.1568-5.6 is installed
  • OR vim-8.0.1568-5.6 is installed
  • BACK