Oval Definition:oval:org.opensuse.security:def:85317
Revision Date:2019-12-05Version:1
Title:Security update for permissions (Moderate)
Description:

This update for permissions fixes the following issues:

- CVE-2019-3688: Changed wrong ownership in /usr/sbin/pinger to root:squid which could have allowed a squid user to gain persistence by changing the binary (bsc#1093414). - CVE-2019-3690: Fixed a privilege escalation through untrusted symbolic links (bsc#1150734). - Fixed a regression which caused segmentation fault (bsc#1157198).
Family:unixClass:patch
Status:Reference(s):1093414
1150734
1157198
CVE-2019-3688
CVE-2019-3690
SUSE-SU-2019:3180-1
Platform(s):SUSE Linux Enterprise Server 12 SP3-LTSS
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-LTSS is installed
  • AND permissions-2015.09.28.1626-17.20.1 is installed
  • BACK