CVE-2019-3690

This update for permissions fixes the following issues:

• CVE-2019-3690: Fixed a privilege escalation through untrusted symlinks (bsc#1150734).

This update for permissions fixes the following issues:

• CVE-2019-3688: Changed wrong ownership in /usr/sbin/pinger to root:squid which could have allowed a squid user to gain persistence by changing the binary (bsc#1093414).
• CVE-2019-3690: Fixed a privilege escalation through untrusted symbolic links (bsc#1150734).
• Fixed a regression which caused segmentation fault (bsc#1157198).

This update for permissions fixes the following issues:

• CVE-2019-3688: Changed wrong ownership in /usr/sbin/pinger to root:squid which could have allowed a squid user to gain persistence by changing the binary (bsc#1093414).
• CVE-2019-3690: Fixed a privilege escalation through untrusted symbolic links (bsc#1150734).
• Fixed a regression which caused sagmentation fault (bsc#1157198).

This update for permissions fixes the following issues:

Security issues fixed:

• CVE-2019-3688: Changed wrong ownership in /usr/sbin/pinger to root:squid which could have allowed a squid user to gain persistence by changing the binary (bsc#1093414).
• CVE-2019-3690: Fixed a privilege escalation through untrusted symbolic links (bsc#1150734).

Other issue addressed:

• Corrected a badly constracted file which could have allowed treating of the shell environment as permissions files (bsc#1097665,bsc#1047247).
• Fixed a regression which caused sagmentation fault (bsc#1157198).

This update for permissions fixes the following issues:

Security issue fixed:

• CVE-2020-8013: Fixed a local privilege escalation with mrsh and wodim (bsc#1163922).

Non-security issues fixed:

• Fixed regression where chkstat breaks without /proc available (bsc#1160764, bsc#1160594)
• Fixed capability handling when doing multiple permission changes at once (bsc#1161779)
• Fixed handling of relative directory symlinks in chkstat

This update for permissions fixes the following issues:

• Fork package for 12-SP5 (bsc#1155939)
• make btmp root:utmp (bsc#1050467, bsc#1182899)
• pcp: remove no longer needed / conflicting entries (bsc#1171883). Fixes a potential security issue.
• do not follow symlinks that are the final path element (CVE-2020-8013, bsc#1163922)
• fix handling of relative directory symlinks in chkstat
• whitelist postgres sticky directories (bsc#1123886)
• fix regression where chkstat breaks without /proc available (bsc#1160764, bsc#1160594)
• fix capability handling when doing multiple permission changes at once (bsc#1161779,
• fix invalid free() when permfiles points to argv (bsc#1157198)
• the eror should be reported for permfiles[i], not argv[i], as these are not the same files. (bsc#1047247, bsc#1097665)
• fix /usr/sbin/pinger ownership to root:squid (bsc#1093414, CVE-2019-3688)
• fix privilege escalation through untrusted symlinks (bsc#1150734, CVE-2019-3690)