Oval Definition:	oval:org.opensuse.security:def:2613
Revision Date: 2020-12-02 Version: 1 Title: Security update for runc (Moderate) Description: This update for runc fixes the following issues: Security issue fixed: - CVE-2019-16884: Fixed an LSM bypass via malicious Docker images that mount over a /proc directory. (bsc#1152308) Non-security issues fixed: - Includes upstreamed patches for regressions (bsc#1131314 bsc#1131553). Family: unix Class: patch Status: Reference(s): 1001161 1069904 1089524 1100397 1109412 1109413 1109414 1111996 1112534 1112535 1112980 1113247 1113252 1113255 1115015 1115022 1115025 1115464 1115722 1115723 1115724 1116827 1118644 1118830 1118831 1118897 1118898 1118899 1118990 1120431 1120640 1121034 1121035 1121056 1121412 1122193 1122293 1122299 1122895 1123886 1131314 1131553 1133131 1133232 1134078 1136572 1138461 1141913 1142772 1150011 1152308 1152590 1154016 1154025 1154401 1156188 1160452 CVE-2017-14804 CVE-2018-1000876 CVE-2018-11212 CVE-2018-16843 CVE-2018-16844 CVE-2018-16845 CVE-2018-16873 CVE-2018-16874 CVE-2018-16875 CVE-2018-17358 CVE-2018-17359 CVE-2018-17360 CVE-2018-17985 CVE-2018-18309 CVE-2018-18483 CVE-2018-18484 CVE-2018-18605 CVE-2018-18606 CVE-2018-18607 CVE-2018-19198 CVE-2018-19199 CVE-2018-19200 CVE-2018-19931 CVE-2018-19932 CVE-2018-20623 CVE-2018-20651 CVE-2018-20671 CVE-2018-20721 CVE-2018-6323 CVE-2018-6543 CVE-2018-6759 CVE-2018-6872 CVE-2018-7208 CVE-2018-7568 CVE-2018-7569 CVE-2018-7570 CVE-2018-7642 CVE-2018-7643 CVE-2018-8945 CVE-2019-1010180 CVE-2019-12855 CVE-2019-14822 CVE-2019-16884 CVE-2019-18804 CVE-2019-19921 CVE-2019-2422 CVE-2019-2426 CVE-2019-6470 SUSE-SU-2019:0221-1 SUSE-SU-2019:0228-1 SUSE-SU-2019:0286-1 SUSE-SU-2019:0334-1 SUSE-SU-2019:0387-1 SUSE-SU-2019:2212-1 SUSE-SU-2019:2387-1 SUSE-SU-2019:2657-1 SUSE-SU-2019:2780-1 SUSE-SU-2019:2810-1 SUSE-SU-2019:3033-1 SUSE-SU-2019:3212-1 SUSE-SU-2020:0375-1 Platform(s): SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise for SAP 12 SUSE Linux Enterprise High Availability 12 SP2 SUSE Linux Enterprise High Availability 12 SP3 SUSE Linux Enterprise High Availability 12 SP4 SUSE Linux Enterprise High Availability 15 SUSE Linux Enterprise High Availability 15 SP1 SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Module for Containers 15 SP1 SUSE Linux Enterprise Module for High Performance Computing 15 SUSE Linux Enterprise Module for Legacy Software 12 SUSE Linux Enterprise Module for Legacy Software 15 SUSE Linux Enterprise Module for Legacy Software 15 SP1 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Web Scripting 12 SUSE Linux Enterprise Module for Web Scripting 15 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP1-LTSS SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 Product(s): Definition Synopsis SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed AND python-pycrypto-2.6.1-1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information avahi-0.6.31-20 is installed OR avahi-lang-0.6.31-20 is installed OR libavahi-client3-0.6.31-20 is installed OR libavahi-client3-32bit-0.6.31-20 is installed OR libavahi-common3-0.6.31-20 is installed OR libavahi-common3-32bit-0.6.31-20 is installed OR libavahi-core7-0.6.31-20 is installed OR libdns_sd-0.6.31-20 is installed OR libdns_sd-32bit-0.6.31-20 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information gstreamer-plugins-base-1.2.4-2.6 is installed OR gstreamer-plugins-base-lang-1.2.4-2.6 is installed OR libgstallocators-1_0-0-1.2.4-2.6 is installed OR libgstapp-1_0-0-1.2.4-2.6 is installed OR libgstapp-1_0-0-32bit-1.2.4-2.6 is installed OR libgstaudio-1_0-0-1.2.4-2.6 is installed OR libgstaudio-1_0-0-32bit-1.2.4-2.6 is installed OR libgstfft-1_0-0-1.2.4-2.6 is installed OR libgstfft-1_0-0-32bit-1.2.4-2.6 is installed OR libgstpbutils-1_0-0-1.2.4-2.6 is installed OR libgstpbutils-1_0-0-32bit-1.2.4-2.6 is installed OR libgstriff-1_0-0-1.2.4-2.6 is installed OR libgstrtp-1_0-0-1.2.4-2.6 is installed OR libgstrtsp-1_0-0-1.2.4-2.6 is installed OR libgstsdp-1_0-0-1.2.4-2.6 is installed OR libgsttag-1_0-0-1.2.4-2.6 is installed OR libgsttag-1_0-0-32bit-1.2.4-2.6 is installed OR libgstvideo-1_0-0-1.2.4-2.6 is installed OR libgstvideo-1_0-0-32bit-1.2.4-2.6 is installed OR typelib-1_0-GstAudio-1_0-1.2.4-2.6 is installed OR typelib-1_0-GstPbutils-1_0-1.2.4-2.6 is installed OR typelib-1_0-GstTag-1_0-1.2.4-2.6 is installed OR typelib-1_0-GstVideo-1_0-1.2.4-2.6 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information libpython3_4m1_0-3.4.5-19 is installed OR python3-3.4.5-19 is installed OR python3-base-3.4.5-19 is installed OR python3-curses-3.4.5-19 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND libid3tag0-0.15.1b-184.3 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 is installed AND Package Information kgraft-patch-3_12_55-52_45-default-2-2.3 is installed OR kgraft-patch-3_12_55-52_45-xen-2-2.3 is installed OR kgraft-patch-SLE12_Update_13-2-2.3 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP2 is installed AND ruby2.1-rubygem-bundler-1.7.3-3 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP3 is installed AND fence-agents-4.0.25+git.1485179354.eb43835-2 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP4 is installed AND Package Information cluster-md-kmp-default-4.12.14-94.41 is installed OR dlm-kmp-default-4.12.14-94.41 is installed OR gfs2-kmp-default-4.12.14-94.41 is installed OR ocfs2-kmp-default-4.12.14-94.41 is installed Definition Synopsis SUSE Linux Enterprise High Availability 15 is installed AND Package Information ruby2.5-rubygem-sprockets-3.7.2-3.3 is installed OR rubygem-sprockets-3.7.2-3.3 is installed Definition Synopsis SUSE Linux Enterprise High Availability 15 SP1 is installed AND Package Information cluster-md-kmp-default-4.12.14-197.4 is installed OR dlm-kmp-default-4.12.14-197.4 is installed OR gfs2-kmp-default-4.12.14-197.4 is installed OR kernel-default-4.12.14-197.4 is installed OR ocfs2-kmp-default-4.12.14-197.4 is installed Definition Synopsis SUSE Linux Enterprise Module for Advanced Systems Management 12 is installed AND facter-2.0.2-1 is installed Definition Synopsis SUSE Linux Enterprise Module for Containers 15 SP1 is installed AND runc-1.0.0~rc8-1.6 is installed Definition Synopsis SUSE Linux Enterprise Module for High Performance Computing 15 is installed AND Package Information python-numpy_1_16_1-gnu-hpc-1.16.1-4.8 is installed OR python2-numpy-gnu-hpc-1.16.1-4.8 is installed OR python2-numpy-gnu-hpc-devel-1.16.1-4.8 is installed OR python3-numpy-gnu-hpc-1.16.1-4.8 is installed OR python3-numpy-gnu-hpc-devel-1.16.1-4.8 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 12 is installed AND Package Information cups154-1.5.4-2 is installed OR cups154-client-1.5.4-2 is installed OR cups154-filters-1.5.4-2 is installed OR cups154-libs-1.5.4-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 is installed AND Package Information java-1_8_0-openjdk-1.8.0.171-3.3 is installed OR java-1_8_0-openjdk-demo-1.8.0.171-3.3 is installed OR java-1_8_0-openjdk-devel-1.8.0.171-3.3 is installed OR java-1_8_0-openjdk-headless-1.8.0.171-3.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 SP1 is installed AND Package Information openldap2-2.4.46-9.19 is installed OR openldap2-back-meta-2.4.46-9.19 is installed OR openldap2-back-perl-2.4.46-9.19 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 is installed AND Package Information kernel-default-4.12.14-25.13 is installed OR kernel-default-livepatch-4.12.14-25.13 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND Package Information kernel-livepatch-4_12_14-197_4-default-3-2 is installed OR kernel-livepatch-SLE15-SP1_Update_1-3-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 is installed AND Package Information java-11-openjdk-11.0.2.0-3.18 is installed OR java-11-openjdk-accessibility-11.0.2.0-3.18 is installed OR java-11-openjdk-demo-11.0.2.0-3.18 is installed OR java-11-openjdk-devel-11.0.2.0-3.18 is installed OR java-11-openjdk-headless-11.0.2.0-3.18 is installed OR java-11-openjdk-javadoc-11.0.2.0-3.18 is installed OR java-11-openjdk-jmods-11.0.2.0-3.18 is installed OR java-11-openjdk-src-11.0.2.0-3.18 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed AND Package Information jakarta-commons-fileupload-1.1.1-4.3 is installed OR jakarta-commons-fileupload-javadoc-1.1.1-4.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 is installed AND Package Information qemu-2.11.2-9.28 is installed OR qemu-arm-2.11.2-9.28 is installed OR qemu-block-curl-2.11.2-9.28 is installed OR qemu-block-iscsi-2.11.2-9.28 is installed OR qemu-block-rbd-2.11.2-9.28 is installed OR qemu-block-ssh-2.11.2-9.28 is installed OR qemu-guest-agent-2.11.2-9.28 is installed OR qemu-ipxe-1.0.0+-9.28 is installed OR qemu-kvm-2.11.2-9.28 is installed OR qemu-lang-2.11.2-9.28 is installed OR qemu-ppc-2.11.2-9.28 is installed OR qemu-s390-2.11.2-9.28 is installed OR qemu-seabios-1.11.0-9.28 is installed OR qemu-sgabios-8-9.28 is installed OR qemu-vgabios-1.11.0-9.28 is installed OR qemu-x86-2.11.2-9.28 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed AND Package Information rmt-server-2.3.1-3.3 is installed OR rmt-server-config-2.3.1-3.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 12 is installed AND Package Information nodejs6-6.9.5-7 is installed OR nodejs6-devel-6.9.5-7 is installed OR nodejs6-docs-6.9.5-7 is installed OR npm6-6.9.5-7 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 is installed AND Package Information nodejs8-8.11.3-3.5 is installed OR nodejs8-devel-8.11.3-3.5 is installed OR nodejs8-docs-8.11.3-3.5 is installed OR npm8-8.11.3-3.5 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND apache2-mod_jk-1.2.40-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information libFLAC++6-1.3.0-11 is installed OR libFLAC8-1.3.0-11 is installed OR libFLAC8-32bit-1.3.0-11 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND apache-commons-httpclient-3.1-4 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND socat-1.7.2.4-3 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND Package Information openldap2-2.4.39-16.1 is installed OR openldap2-back-perl-2.4.39-16.1 is installed OR openldap2-client-2.4.39-16.1 is installed OR openldap2-devel-2.4.39-16.1 is installed OR openldap2-devel-static-2.4.39-16.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND mozilla-nspr-devel-4.10.10-9.1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND libwmf-0_2-7-0.2.8.4-242.3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information MozillaThunderbird-60.7.0-3.33 is installed OR MozillaThunderbird-translations-common-60.7.0-3.33 is installed OR MozillaThunderbird-translations-other-60.7.0-3.33 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND Package Information libixion-0.14.1-4.3 is installed OR libixion-0_14-0-0.14.1-4.3 is installed OR liborcus-0.14.1-3.3 is installed OR liborcus-0_14-0-0.14.1-3.3 is installed OR liborcus-devel-0.14.1-3.3 is installed OR myspell-af_ZA-20190423-3.9 is installed OR myspell-ar-20190423-3.9 is installed OR myspell-bg_BG-20190423-3.9 is installed OR myspell-bn_BD-20190423-3.9 is installed OR myspell-br_FR-20190423-3.9 is installed OR myspell-ca-20190423-3.9 is installed OR myspell-cs_CZ-20190423-3.9 is installed OR myspell-da_DK-20190423-3.9 is installed OR myspell-dictionaries-20190423-3.9 is installed OR myspell-el_GR-20190423-3.9 is installed OR myspell-et_EE-20190423-3.9 is installed OR myspell-fr_FR-20190423-3.9 is installed OR myspell-gl-20190423-3.9 is installed OR myspell-gu_IN-20190423-3.9 is installed OR myspell-he_IL-20190423-3.9 is installed OR myspell-hi_IN-20190423-3.9 is installed OR myspell-hr_HR-20190423-3.9 is installed OR myspell-it_IT-20190423-3.9 is installed OR myspell-lt_LT-20190423-3.9 is installed OR myspell-lv_LV-20190423-3.9 is installed OR myspell-nl_NL-20190423-3.9 is installed OR myspell-nn_NO-20190423-3.9 is installed OR myspell-pl_PL-20190423-3.9 is installed OR myspell-pt_PT-20190423-3.9 is installed OR myspell-si_LK-20190423-3.9 is installed OR myspell-sk_SK-20190423-3.9 is installed OR myspell-sl_SI-20190423-3.9 is installed OR myspell-sr-20190423-3.9 is installed OR myspell-sv_SE-20190423-3.9 is installed OR myspell-te_IN-20190423-3.9 is installed OR myspell-th_TH-20190423-3.9 is installed OR myspell-tr_TR-20190423-3.9 is installed OR myspell-uk_UA-20190423-3.9 is installed OR myspell-zu_ZA-20190423-3.9 is installed
BACK