Oval Definition:	oval:org.opensuse.security:def:201910063
Revision Date: 2022-08-07 Version: 1 Title: CVE-2019-10063 Description: Flatpak before 1.0.8, 1.1.x and 1.2.x before 1.2.4, and 1.3.x before 1.3.1 allows a sandbox bypass. Flatpak versions since 0.8.1 address CVE-2017-5226 by using a seccomp filter to prevent sandboxed apps from using the TIOCSTI ioctl, which could otherwise be used to inject commands into the controlling terminal so that they would be executed outside the sandbox after the sandboxed app exits. This fix was incomplete: on 64-bit platforms, the seccomp filter could be bypassed by an ioctl request number that has TIOCSTI in its 32 least significant bits and an arbitrary nonzero value in its 32 most significant bits, which the Linux kernel would treat as equivalent to TIOCSTI. Family: unix Class: vulnerability Status: Reference(s): CVE-2019-10063 Mitre CVE-2019-10063 SUSE CVE-2019-10063 Platform(s): openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Tumbleweed SUSE Linux Enterprise Desktop 15 SUSE Linux Enterprise Desktop 15 SP1 SUSE Linux Enterprise Desktop 15 SP2 SUSE Linux Enterprise Desktop 15 SP3 SUSE Linux Enterprise Desktop 15 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise High Performance Computing 15 SUSE Linux Enterprise High Performance Computing 15 SP1 SUSE Linux Enterprise High Performance Computing 15 SP2 SUSE Linux Enterprise High Performance Computing 15 SP3 SUSE Linux Enterprise High Performance Computing 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 15 SUSE Linux Enterprise Server 15 SP1 SUSE Linux Enterprise Server 15 SP2 SUSE Linux Enterprise Server 15 SP3 SUSE Linux Enterprise Server 15 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Storage 6 SUSE Linux Enterprise Storage 7 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.0 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.0 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.0 SUSE Manager Server 4.1 SUSE Manager Server 4.2 SUSE Manager Server 4.3 Product(s): Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed AND Package Information flatpak-1.2.3-2 is installed OR flatpak-devel-1.2.3-2 is installed OR flatpak-zsh-completion-1.2.3-2 is installed OR libflatpak0-1.2.3-2 is installed OR typelib-1_0-Flatpak-1_0-1.2.3-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP5 is installed AND Package Information flatpak-1.4.2-1 is installed OR libflatpak0-1.4.2-1 is installed OR typelib-1_0-Flatpak-1_0-1.4.2-1 is installed Definition Synopsis Release Information SUSE Linux Enterprise High Performance Computing 12 SP5 is installed OR SUSE Linux Enterprise Server 12 SP5 is installed AND Package Information flatpak-1.4.2-1 is installed OR libflatpak0-1.4.2-1 is installed OR typelib-1_0-Flatpak-1_0-1.4.2-1 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 SP2 is installed AND Package Information flatpak-1.6.3-2 is installed OR flatpak-devel-1.6.3-2 is installed OR flatpak-zsh-completion-1.6.3-2 is installed OR libflatpak0-1.6.3-2 is installed OR system-user-flatpak-1.6.3-2 is installed OR typelib-1_0-Flatpak-1_0-1.6.3-2 is installed Definition Synopsis Release Information SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed AND flatpak-1.2.3-2 is installed OR flatpak-devel-1.2.3-2 is installed OR flatpak-zsh-completion-1.2.3-2 is installed OR libflatpak0-1.2.3-2 is installed OR typelib-1_0-Flatpak-1_0-1.2.3-2 is installed OR Package Information SUSE Linux Enterprise Module for Desktop Applications 15 SP2 is installed AND flatpak-1.6.3-2 is installed OR flatpak-devel-1.6.3-2 is installed OR flatpak-zsh-completion-1.6.3-2 is installed OR libflatpak0-1.6.3-2 is installed OR system-user-flatpak-1.6.3-2 is installed OR typelib-1_0-Flatpak-1_0-1.6.3-2 is installed Definition Synopsis openSUSE Tumbleweed is installed AND Package Information flatpak-1.11.3-1.2 is installed OR flatpak-devel-1.11.3-1.2 is installed OR flatpak-zsh-completion-1.11.3-1.2 is installed OR libflatpak0-1.11.3-1.2 is installed OR system-user-flatpak-1.11.3-1.2 is installed OR typelib-1_0-Flatpak-1_0-1.11.3-1.2 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed AND Package Information flatpak-1.2.3-2.12 is installed OR flatpak-devel-1.2.3-2.12 is installed OR flatpak-zsh-completion-1.2.3-2.12 is installed OR libflatpak0-1.2.3-2.12 is installed OR typelib-1_0-Flatpak-1_0-1.2.3-2.12 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 SP2 is installed AND Package Information flatpak-1.6.3-2.7 is installed OR flatpak-devel-1.6.3-2.7 is installed OR flatpak-zsh-completion-1.6.3-2.7 is installed OR libflatpak0-1.6.3-2.7 is installed OR system-user-flatpak-1.6.3-2.7 is installed OR typelib-1_0-Flatpak-1_0-1.6.3-2.7 is installed Definition Synopsis Release Information SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed AND flatpak-1.2.3-2.12 is installed OR flatpak-devel-1.2.3-2.12 is installed OR flatpak-zsh-completion-1.2.3-2.12 is installed OR libflatpak0-1.2.3-2.12 is installed OR typelib-1_0-Flatpak-1_0-1.2.3-2.12 is installed OR Package Information SUSE Linux Enterprise Module for Desktop Applications 15 SP2 is installed AND flatpak-1.6.3-2.7 is installed OR flatpak-devel-1.6.3-2.7 is installed OR flatpak-zsh-completion-1.6.3-2.7 is installed OR libflatpak0-1.6.3-2.7 is installed OR system-user-flatpak-1.6.3-2.7 is installed OR typelib-1_0-Flatpak-1_0-1.6.3-2.7 is installed OR Package Information SUSE Linux Enterprise Module for Desktop Applications 15 SP3 is installed AND flatpak-1.10.2-4.6.1 is installed OR flatpak-devel-1.10.2-4.6.1 is installed OR flatpak-zsh-completion-1.10.2-4.6.1 is installed OR libflatpak0-1.10.2-4.6.1 is installed OR system-user-flatpak-1.10.2-4.6.1 is installed OR typelib-1_0-Flatpak-1_0-1.10.2-4.6.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Desktop 15 SP3 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP3 is installed OR SUSE Linux Enterprise Module for Desktop Applications 15 SP3 is installed OR SUSE Linux Enterprise Server 15 SP3 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed OR SUSE Linux Enterprise Storage 7.1 is installed OR SUSE Manager Proxy 4.2 is installed OR SUSE Manager Retail Branch Server 4.2 is installed OR SUSE Manager Server 4.2 is installed AND Package Information flatpak-1.10.2-4.6.1 is installed OR flatpak-devel-1.10.2-4.6.1 is installed OR flatpak-zsh-completion-1.10.2-4.6.1 is installed OR libflatpak0-1.10.2-4.6.1 is installed OR system-user-flatpak-1.10.2-4.6.1 is installed OR typelib-1_0-Flatpak-1_0-1.10.2-4.6.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Desktop 15 is installed OR SUSE Linux Enterprise High Performance Computing 15 is installed OR SUSE Linux Enterprise Module for Desktop Applications 15 is installed OR SUSE Linux Enterprise Server 15 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 is installed AND flatpak is affected OR Package Information SUSE Linux Enterprise Desktop 15 SP1 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP1 is installed OR SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed OR SUSE Linux Enterprise Server 15 SP1 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed OR SUSE Linux Enterprise Storage 6 is installed OR SUSE Manager Proxy 4.0 is installed OR SUSE Manager Retail Branch Server 4.0 is installed OR SUSE Manager Server 4.0 is installed AND flatpak-1.2.3-2.12 is installed OR flatpak-devel-1.2.3-2.12 is installed OR flatpak-zsh-completion-1.2.3-2.12 is installed OR libflatpak0-1.2.3-2.12 is installed OR typelib-1_0-Flatpak-1_0-1.2.3-2.12 is installed OR Package Information SUSE Linux Enterprise Desktop 15 SP2 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP2 is installed OR SUSE Linux Enterprise Module for Desktop Applications 15 SP2 is installed OR SUSE Linux Enterprise Server 15 SP2 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP2 is installed OR SUSE Linux Enterprise Storage 7 is installed OR SUSE Manager Proxy 4.1 is installed OR SUSE Manager Retail Branch Server 4.1 is installed OR SUSE Manager Server 4.1 is installed AND flatpak-1.6.3-2.7 is installed OR flatpak-devel-1.6.3-2.7 is installed OR flatpak-zsh-completion-1.6.3-2.7 is installed OR libflatpak0-1.6.3-2.7 is installed OR system-user-flatpak-1.6.3-2.7 is installed OR typelib-1_0-Flatpak-1_0-1.6.3-2.7 is installed OR Package Information SUSE Linux Enterprise Desktop 15 SP3 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP3 is installed OR SUSE Linux Enterprise Module for Desktop Applications 15 SP3 is installed OR SUSE Linux Enterprise Server 15 SP3 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed OR SUSE Linux Enterprise Storage 7.1 is installed OR SUSE Manager Proxy 4.2 is installed OR SUSE Manager Retail Branch Server 4.2 is installed OR SUSE Manager Server 4.2 is installed AND flatpak-1.10.2-4.6.1 is installed OR flatpak-devel-1.10.2-4.6.1 is installed OR flatpak-zsh-completion-1.10.2-4.6.1 is installed OR libflatpak0-1.10.2-4.6.1 is installed OR system-user-flatpak-1.10.2-4.6.1 is installed OR typelib-1_0-Flatpak-1_0-1.10.2-4.6.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed AND flatpak is not affected OR Package Information SUSE Linux Enterprise Server 12 SP5 is installed AND flatpak-1.4.2-1.31 is installed OR libflatpak0-1.4.2-1.31 is installed OR typelib-1_0-Flatpak-1_0-1.4.2-1.31 is installed Definition Synopsis Release Information SUSE Linux Enterprise Desktop 15 SP2 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP2 is installed OR SUSE Linux Enterprise Module for Desktop Applications 15 SP2 is installed OR SUSE Linux Enterprise Server 15 SP2 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP2 is installed OR SUSE Linux Enterprise Storage 7 is installed OR SUSE Manager Proxy 4.1 is installed OR SUSE Manager Retail Branch Server 4.1 is installed OR SUSE Manager Server 4.1 is installed AND flatpak-1.6.3-2.7 is installed OR flatpak-devel-1.6.3-2.7 is installed OR flatpak-zsh-completion-1.6.3-2.7 is installed OR libflatpak0-1.6.3-2.7 is installed OR system-user-flatpak-1.6.3-2.7 is installed OR typelib-1_0-Flatpak-1_0-1.6.3-2.7 is installed OR Package Information SUSE Linux Enterprise Desktop 15 SP3 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP3 is installed OR SUSE Linux Enterprise Module for Desktop Applications 15 SP3 is installed OR SUSE Linux Enterprise Server 15 SP3 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed OR SUSE Linux Enterprise Storage 7.1 is installed OR SUSE Manager Proxy 4.2 is installed OR SUSE Manager Retail Branch Server 4.2 is installed OR SUSE Manager Server 4.2 is installed AND flatpak-1.10.2-4.6.1 is installed OR flatpak-devel-1.10.2-4.6.1 is installed OR flatpak-zsh-completion-1.10.2-4.6.1 is installed OR libflatpak0-1.10.2-4.6.1 is installed OR system-user-flatpak-1.10.2-4.6.1 is installed OR typelib-1_0-Flatpak-1_0-1.10.2-4.6.1 is installed Definition Synopsis openSUSE Leap 15.3 is installed AND Package Information flatpak-1.10.2-4.6.1 is installed AND flatpak is signed with openSUSE key OR libflatpak0-1.10.2-4.6.1 is installed AND libflatpak0 is signed with openSUSE key OR system-user-flatpak-1.10.2-4.6.1 is installed AND system-user-flatpak is signed with openSUSE key Definition Synopsis openSUSE Leap 15.4 is installed AND Package Information flatpak-1.12.5-150400.1.11 is installed AND flatpak is signed with openSUSE key OR libflatpak0-1.12.5-150400.1.11 is installed AND libflatpak0 is signed with openSUSE key OR system-user-flatpak-1.12.5-150400.1.11 is installed AND system-user-flatpak is signed with openSUSE key Definition Synopsis Release Information SUSE Linux Enterprise Desktop 15 SP4 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP4 is installed OR SUSE Linux Enterprise Module for Desktop Applications 15 SP4 is installed OR SUSE Linux Enterprise Server 15 SP4 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP4 is installed OR SUSE Manager Proxy 4.3 is installed OR SUSE Manager Retail Branch Server 4.3 is installed OR SUSE Manager Server 4.3 is installed AND Package Information flatpak-1.12.5-150400.1.11 is installed OR flatpak-devel-1.12.5-150400.1.11 is installed OR flatpak-zsh-completion-1.12.5-150400.1.11 is installed OR libflatpak0-1.12.5-150400.1.11 is installed OR system-user-flatpak-1.12.5-150400.1.11 is installed OR typelib-1_0-Flatpak-1_0-1.12.5-150400.1.11 is installed
BACK