CVE catalog

CVE-2020-8013

Security update for permissions

[CVE catalog]

Severity
Medium · CVSS 6.8CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.32% · Oct 25, 2026

This update for permissions fixes the following issues: Security issues fixed: - CVE-2020-8013: Fixed a missing symlink check. Do not follow symlinks that are the final path element (bsc#1163922). - Fixed a regression where chkstat broke when /proc was not available (bsc#1160764, bsc#1160594).

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Susepermissionslinux enterprise point of sale 11 sp32013.1.7-0.6.12.1fixed
Susepermissionslinux enterprise server 11 sp4-ltss2013.1.7-0.6.12.1fixed
Susepermissionslinux enterprise desktop 12 sp420170707-3.21.1fixed
Susepermissionslinux enterprise server 12 sp420170707-3.21.1fixed
Susepermissionslinux enterprise server for sap applications 12 sp420170707-3.21.1fixed
Susepermissionslinux enterprise server 12 sp520170707-3.21.1fixed
Susepermissionslinux enterprise server for sap applications 12 sp520170707-3.21.1fixed
Susepermissionslinux enterprise server 11 sp4-ltss2013.1.7-0.6.12.1fixed
Opensusepermissionsleap 15.120181116-lp151.4.12.1fixed
Susepermissionslinux enterprise module for basesystem 15 sp120181116-9.23.1fixed
Susepermissionshpe helion openstack 82015.09.28.1626-17.27.1fixed
Susepermissionsopenstack cloud 72015.09.28.1626-17.27.1fixed
Susepermissionsopenstack cloud 82015.09.28.1626-17.27.1fixed
Susepermissionsopenstack cloud crowbar 82015.09.28.1626-17.27.1fixed
Susepermissionslinux enterprise server for sap applications 12 sp22015.09.28.1626-17.27.1fixed
Susepermissionslinux enterprise server for sap applications 12 sp32015.09.28.1626-17.27.1fixed
Susepermissionslinux enterprise server 12 sp2-ltss2015.09.28.1626-17.27.1fixed
Susepermissionslinux enterprise server 12 sp2-bcl2015.09.28.1626-17.27.1fixed
Susepermissionslinux enterprise server 12 sp3-ltss2015.09.28.1626-17.27.1fixed
Susepermissionslinux enterprise server 12 sp3-bcl2015.09.28.1626-17.27.1fixed
Susepermissionsenterprise storage 52015.09.28.1626-17.27.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Susepermissionsrpmlinux enterprise point of sale 11 sp32013.1.7-0.6.12.1Not reportedSUSE-RU-2020:14304-1Not reported
Susepermissionsrpmlinux enterprise server 11 sp4-ltss2013.1.7-0.6.12.1Not reportedSUSE-RU-2020:14304-1Not reported
Susepermissionsrpmlinux enterprise desktop 12 sp420170707-3.21.1Not reportedSUSE-RU-2020:0603-1Not reported
Susepermissionsrpmlinux enterprise server 12 sp420170707-3.21.1Not reportedSUSE-RU-2020:0603-1Not reported
Susepermissionsrpmlinux enterprise server for sap applications 12 sp420170707-3.21.1Not reportedSUSE-RU-2020:0603-1Not reported
Susepermissionsrpmlinux enterprise server 12 sp520170707-3.21.1Not reportedSUSE-RU-2020:0603-1Not reported
Susepermissionsrpmlinux enterprise server for sap applications 12 sp520170707-3.21.1Not reportedSUSE-RU-2020:0603-1Not reported
Susepermissionsrpmlinux enterprise server 11 sp4-ltss2013.1.7-0.6.12.1Not reportedSUSE-SU-2020:14304-1Not reported
Opensusepermissionsrpmleap 15.120181116-lp151.4.12.1Not reportedOPENSUSE-SU-2020:0302-1Not reported
Susepermissionsrpmlinux enterprise module for basesystem 15 sp120181116-9.23.1Not reportedSUSE-SU-2020:0547-1Not reported
Susepermissionsrpmhpe helion openstack 82015.09.28.1626-17.27.1Not reportedSUSE-SU-2020:0545-1Not reported
Susepermissionsrpmopenstack cloud 72015.09.28.1626-17.27.1Not reportedSUSE-SU-2020:0545-1Not reported
Susepermissionsrpmopenstack cloud 82015.09.28.1626-17.27.1Not reportedSUSE-SU-2020:0545-1Not reported
Susepermissionsrpmopenstack cloud crowbar 82015.09.28.1626-17.27.1Not reportedSUSE-SU-2020:0545-1Not reported
Susepermissionsrpmlinux enterprise server for sap applications 12 sp22015.09.28.1626-17.27.1Not reportedSUSE-SU-2020:0545-1Not reported
Susepermissionsrpmlinux enterprise server for sap applications 12 sp32015.09.28.1626-17.27.1Not reportedSUSE-SU-2020:0545-1Not reported
Susepermissionsrpmlinux enterprise server 12 sp2-ltss2015.09.28.1626-17.27.1Not reportedSUSE-SU-2020:0545-1Not reported
Susepermissionsrpmlinux enterprise server 12 sp2-bcl2015.09.28.1626-17.27.1Not reportedSUSE-SU-2020:0545-1Not reported
Susepermissionsrpmlinux enterprise server 12 sp3-ltss2015.09.28.1626-17.27.1Not reportedSUSE-SU-2020:0545-1Not reported
Susepermissionsrpmlinux enterprise server 12 sp3-bcl2015.09.28.1626-17.27.1Not reportedSUSE-SU-2020:0545-1Not reported
Susepermissionsrpmenterprise storage 52015.09.28.1626-17.27.1Not reportedSUSE-SU-2020:0545-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]