Security update for libcap-ng SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2017:0375-1 Final 1 1 2017-02-03T07:07:26Z current 2017-02-03T07:07:26Z 2017-02-03T07:07:26Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for libcap-ng libcap-ng was updated to fix one security issue. This security issue was fixed: - CVE-2014-3215: seunshare in policycoreutils (which uses libcap-ng) is owned by root with 4755 permissions, and executes programs in a way that changes the relationship between the setuid system call and the getresuid saved set-user-ID value, which made it easier for local users to gain privileges by leveraging a program that mistakenly expected that it could permanently drop privileges (bsc#876832). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sdksp4-libcap-ng-12965,slessp4-libcap-ng-12965 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2017/suse-su-20170375-1/ Link for SUSE-SU-2017:0375-1 https://lists.suse.com/pipermail/sle-security-updates/2017-February/002617.html E-Mail link for SUSE-SU-2017:0375-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/876832 SUSE Bug 876832 https://www.suse.com/security/cve/CVE-2014-3215/ SUSE CVE CVE-2014-3215 page SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 libcap-ng-devel-0.6.3-1.9.6 python-capng-0.6.3-1.9.6 libcap-ng-utils-0.6.3-1.9.6 libcap-ng0-0.6.3-1.9.6 libcap-ng0-32bit-0.6.3-1.9.6 libcap-ng-utils-0.6.3-1.9.6 as a component of SUSE Linux Enterprise Server 11 SP4 libcap-ng0-0.6.3-1.9.6 as a component of SUSE Linux Enterprise Server 11 SP4 libcap-ng0-32bit-0.6.3-1.9.6 as a component of SUSE Linux Enterprise Server 11 SP4 libcap-ng-utils-0.6.3-1.9.6 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libcap-ng0-0.6.3-1.9.6 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libcap-ng0-32bit-0.6.3-1.9.6 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libcap-ng-devel-0.6.3-1.9.6 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 python-capng-0.6.3-1.9.6 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 seunshare in policycoreutils 2.2.5 is owned by root with 4755 permissions, and executes programs in a way that changes the relationship between the setuid system call and the getresuid saved set-user-ID value, which makes it easier for local users to gain privileges by leveraging a program that mistakenly expected that it could permanently drop privileges. CVE-2014-3215 SUSE Linux Enterprise Server 11 SP4:libcap-ng-utils-0.6.3-1.9.6 SUSE Linux Enterprise Server 11 SP4:libcap-ng0-0.6.3-1.9.6 SUSE Linux Enterprise Server 11 SP4:libcap-ng0-32bit-0.6.3-1.9.6 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libcap-ng-utils-0.6.3-1.9.6 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libcap-ng0-0.6.3-1.9.6 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libcap-ng0-32bit-0.6.3-1.9.6 SUSE Linux Enterprise Software Development Kit 11 SP4:libcap-ng-devel-0.6.3-1.9.6 SUSE Linux Enterprise Software Development Kit 11 SP4:python-capng-0.6.3-1.9.6 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20170375-1/ https://www.suse.com/security/cve/CVE-2014-3215.html CVE-2014-3215 https://bugzilla.suse.com/876832 SUSE Bug 876832