Oval Definition:	oval:org.opensuse.security:def:20158607
Revision Date: 2022-09-02 Version: 1 Title: CVE-2015-8607 Description: The canonpath function in the File::Spec module in PathTools before 3.62, as used in Perl, does not properly preserve the taint attribute of data, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string. Family: unix Class: vulnerability Status: Reference(s): CVE-2015-8607 Mitre CVE-2015-8607 SUSE CVE-2015-8607 openSUSE-SU-2016:0881-1 Platform(s): openSUSE 13.2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Desktop 15 SUSE Linux Enterprise Desktop 15 SP1 SUSE Linux Enterprise High Performance Computing 15 SUSE Linux Enterprise High Performance Computing 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 15 SUSE Linux Enterprise Server 15 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Storage 6 SUSE Manager Proxy 4.0 SUSE Manager Retail Branch Server 4.0 SUSE Manager Server 4.0 Product(s): Definition Synopsis openSUSE 13.2 is installed AND Package Information perl-5.20.1-3.1 is installed OR perl-32bit-5.20.1-3.1 is installed OR perl-base-5.20.1-3.1 is installed OR perl-base-32bit-5.20.1-3.1 is installed OR perl-doc-5.20.1-3.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed OR SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed AND perl is not affected Definition Synopsis Release Information SUSE Linux Enterprise Module for Basesystem 15 is installed OR SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed OR SUSE Linux Enterprise Module for Development Tools 15 is installed OR SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed AND perl is not affected Definition Synopsis Release Information SUSE Linux Enterprise Desktop 12 SP3 is installed OR SUSE Linux Enterprise Desktop 12 SP4 is installed AND perl is not affected Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP3 is installed OR SUSE Linux Enterprise Server 12 SP4 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed AND perl is not affected OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed AND perl is not affected OR perl-32bit is not affected OR perl-base is not affected OR perl-doc is not affected Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND perl is not affected Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND perl is not affected Definition Synopsis Release Information SUSE Linux Enterprise Desktop 12 SP4 is installed OR SUSE Linux Enterprise Server 12 SP4 is installed AND perl is not affected OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed AND perl is not affected OR perl-32bit is not affected OR perl-base is not affected OR perl-doc is not affected
BACK