Oval Definition:	oval:org.opensuse.security:def:2822
Revision Date: 2020-12-02 Version: 1 Title: Security update for tigervnc (Important) Description: This update for tigervnc fixes the following issues: - CVE-2019-15691: Fixed a use-after-return due to incorrect usage of stack memory in ZRLEDecoder (bsc#1159856). - CVE-2019-15692: Fixed a heap-based buffer overflow in CopyRectDecode (bsc#1160250). - CVE-2019-15693: Fixed a heap-based buffer overflow in TightDecoder::FilterGradient (bsc#1159858). - CVE-2019-15694: Fixed a heap-based buffer overflow, caused by improper error handling in processing MemOutStream (bsc#1160251). - CVE-2019-15695: Fixed a stack-based buffer overflow, which could be triggered from CMsgReader::readSetCursor (bsc#1159860). Family: unix Class: patch Status: Reference(s): 1012382 1050242 1051510 1053043 1055117 1055186 1056787 1058115 1061840 1063638 1064802 1065600 1065729 1066129 1068546 1071995 1075020 1082387 1083647 1083710 1085535 1096726 1099658 1102247 1103991 1103992 1104353 1104427 1104745 1106011 1106284 1108193 1108838 1108937 1109837 1110946 1111666 1111696 1112063 1112374 1113722 1114427 1115375 1115688 1117158 1117507 1117508 1117561 1118139 1119222 1119843 1120091 1120423 1120566 1120843 1120902 1122776 1122794 1123080 1123454 1123663 1124503 1124839 1126356 1127034 1127315 1127611 1127616 1128052 1128106 1128904 1128979 1129138 1129273 1129497 1129693 1129770 1130579 1130699 1130972 1131326 1131451 1131488 1131565 1131673 1132044 1133021 1133031 1133037 1133176 1133188 1133190 1133291 1133320 1133612 1133616 1134090 1134097 1134160 1134162 1134199 1134200 1134201 1134202 1134203 1134204 1134205 1134354 1134390 1134393 1134399 1134459 1134460 1134461 1134537 1134597 1134651 1134671 1134760 1134806 1134810 1134813 1134848 1134883 1134936 1135006 1135007 1135008 1135056 1135100 1135120 1135210 1135278 1135281 1135309 1135312 1135314 1135315 1135316 1135320 1135323 1135330 1135335 1135492 1135542 1135556 1135603 1135642 1135661 1135715 1135758 1135902 1136206 1136217 1136342 1136424 1136428 1136430 1136432 1136434 1136435 1136438 1136439 1136460 1136461 1136462 1136467 1136477 1136478 1136540 1136573 1136586 1136778 1136881 1136935 1136990 1137151 1137152 1137153 1137162 1137372 1137444 1137458 1137534 1137535 1137584 1137586 1137609 1137739 1137752 1137811 1137827 1138534 1138874 1139358 1139619 1140133 1140139 1140322 1140402 1140559 1140652 1140676 1140903 1140945 1140948 1141267 1141312 1141401 1141402 1141452 1141453 1141454 1141478 1141558 1141780 1141782 1141783 1141784 1141785 1141786 1141787 1141789 1141844 1142023 1142031 1142052 1142083 1142112 1142115 1142119 1142220 1142221 1142254 1142350 1142351 1142354 1142359 1142450 1142623 1142673 1142701 1142868 1143003 1143045 1143105 1143185 1143189 1143191 1143209 1143507 1143794 1144059 1144087 1149429 1159856 1159858 1159860 1160250 1160251 1172225 CVE-2018-15664 CVE-2018-19540 CVE-2018-19541 CVE-2018-20855 CVE-2018-7191 CVE-2019-10124 CVE-2019-10197 CVE-2019-11085 CVE-2019-1125 CVE-2019-11459 CVE-2019-11477 CVE-2019-11478 CVE-2019-11479 CVE-2019-11486 CVE-2019-11487 CVE-2019-11810 CVE-2019-11815 CVE-2019-11833 CVE-2019-11884 CVE-2019-12155 CVE-2019-12382 CVE-2019-13164 CVE-2019-13616 CVE-2019-13626 CVE-2019-13631 CVE-2019-13648 CVE-2019-14283 CVE-2019-14284 CVE-2019-14378 CVE-2019-15691 CVE-2019-15692 CVE-2019-15693 CVE-2019-15694 CVE-2019-15695 CVE-2019-15903 CVE-2019-20807 CVE-2019-2745 CVE-2019-2762 CVE-2019-2766 CVE-2019-2769 CVE-2019-2786 CVE-2019-2816 CVE-2019-2842 CVE-2019-3846 CVE-2019-5008 CVE-2019-5489 CVE-2019-6237 CVE-2019-7317 CVE-2019-8571 CVE-2019-8583 CVE-2019-8584 CVE-2019-8586 CVE-2019-8587 CVE-2019-8594 CVE-2019-8595 CVE-2019-8596 CVE-2019-8597 CVE-2019-8601 CVE-2019-8607 CVE-2019-8608 CVE-2019-8609 CVE-2019-8610 CVE-2019-8611 CVE-2019-8615 CVE-2019-8619 CVE-2019-8622 CVE-2019-8623 SUSE-SU-2019:1535-1 SUSE-SU-2019:1562-1 SUSE-SU-2019:1648-1 SUSE-SU-2019:2021-1 SUSE-SU-2019:2073-1 SUSE-SU-2019:2192-1 SUSE-SU-2019:2429-1 SUSE-SU-2019:2463-1 SUSE-SU-2019:2512-1 SUSE-SU-2020:0113-1 SUSE-SU-2020:1551-1 Platform(s): SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise High Availability 12 SP2 SUSE Linux Enterprise High Availability 12 SP3 SUSE Linux Enterprise High Availability 12 SP4 SUSE Linux Enterprise Module for additional PackageHub packages 15 SUSE Linux Enterprise Module for additional PackageHub packages 15 SP1 SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Module for High Performance Computing 15 SP1 SUSE Linux Enterprise Module for Legacy Software 12 SUSE Linux Enterprise Module for Legacy Software 15 SUSE Linux Enterprise Module for Legacy Software 15 SP1 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Public Cloud 15 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Linux Enterprise Module for Python2 packages 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Web Scripting 12 SUSE Linux Enterprise Module for Web Scripting 15 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP1-CLIENT-TOOLS SUSE Linux Enterprise Server 11 SP1-LTSS SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 11-SECURITY SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Workstation Extension 15 SP1 Product(s): Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information aaa_base-13.2+git20140911.61c1681-1 is installed OR aaa_base-extras-13.2+git20140911.61c1681-1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information DirectFB-1.7.1-4 is installed OR lib++dfb-1_7-1-1.7.1-4 is installed OR libdirectfb-1_7-1-1.7.1-4 is installed OR libdirectfb-1_7-1-32bit-1.7.1-4 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information openssh-7.2p2-74.11 is installed OR openssh-askpass-gnome-7.2p2-74.11 is installed OR openssh-helpers-7.2p2-74.11 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND busybox-1.21.1-3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND zsh-5.0.5-6.7 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP2 is installed AND fence-agents-4.0.22+git.1455008135.15c5e92-8 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP3 is installed AND haproxy-1.6.11-10 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP4 is installed AND fence-agents-4.2.1+git.1537269352.7b1fd536-1 is installed Definition Synopsis SUSE Linux Enterprise Module for additional PackageHub packages 15 is installed AND Package Information glib2-2.54.3-4.7 is installed OR glib2-devel-32bit-2.54.3-4.7 is installed OR glib2-tools-32bit-2.54.3-4.7 is installed OR libgthread-2_0-0-32bit-2.54.3-4.7 is installed Definition Synopsis SUSE Linux Enterprise Module for additional PackageHub packages 15 SP1 is installed AND Package Information binutils-2.32-7.5 is installed OR binutils-gold-2.32-7.5 is installed Definition Synopsis SUSE Linux Enterprise Module for Advanced Systems Management 12 is installed AND facter-2.0.2-1 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed AND Package Information libXvnc-devel-1.9.0-19.3 is installed OR tigervnc-1.9.0-19.3 is installed Definition Synopsis SUSE Linux Enterprise Module for High Performance Computing 15 SP1 is installed AND Package Information libmunge2-0.5.13-4.3 is installed OR munge-0.5.13-4.3 is installed OR munge-devel-0.5.13-4.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 12 is installed AND Package Information java-1_6_0-ibm-1.6.0_sr16.1-5 is installed OR java-1_6_0-ibm-fonts-1.6.0_sr16.1-5 is installed OR java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5 is installed OR java-1_6_0-ibm-plugin-1.6.0_sr16.1-5 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 is installed AND Package Information kernel-default-4.12.14-25.19 is installed OR reiserfs-kmp-default-4.12.14-25.19 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 SP1 is installed AND Package Information kernel-default-4.12.14-197.18 is installed OR reiserfs-kmp-default-4.12.14-197.18 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 is installed AND Package Information kernel-livepatch-4_12_14-23-default-2-4 is installed OR kernel-livepatch-SLE15_Update_0-2-4 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND Package Information kernel-livepatch-4_12_14-195-default-3-7 is installed OR kernel-livepatch-SLE15-SP1_Update_0-3-7 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed AND Package Information cluster-md-kmp-azure-4.12.14-5.30 is installed OR dlm-kmp-azure-4.12.14-5.30 is installed OR gfs2-kmp-azure-4.12.14-5.30 is installed OR kernel-azure-4.12.14-5.30 is installed OR kernel-azure-base-4.12.14-5.30 is installed OR kernel-azure-devel-4.12.14-5.30 is installed OR kernel-azure-extra-4.12.14-5.30 is installed OR kernel-azure-livepatch-4.12.14-5.30 is installed OR kernel-devel-azure-4.12.14-5.30 is installed OR kernel-source-azure-4.12.14-5.30 is installed OR kernel-syms-azure-4.12.14-5.30 is installed OR kselftests-kmp-azure-4.12.14-5.30 is installed OR ocfs2-kmp-azure-4.12.14-5.30 is installed OR reiserfs-kmp-azure-4.12.14-5.30 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 is installed AND Package Information libpmi0_20_02-20.02.3-3.8 is installed OR perl-slurm_20_02-20.02.3-3.8 is installed OR slurm_20_02-20.02.3-3.8 is installed OR slurm_20_02-auth-none-20.02.3-3.8 is installed OR slurm_20_02-config-20.02.3-3.8 is installed OR slurm_20_02-config-man-20.02.3-3.8 is installed OR slurm_20_02-cray-20.02.3-3.8 is installed OR slurm_20_02-devel-20.02.3-3.8 is installed OR slurm_20_02-doc-20.02.3-3.8 is installed OR slurm_20_02-hdf5-20.02.3-3.8 is installed OR slurm_20_02-lua-20.02.3-3.8 is installed OR slurm_20_02-munge-20.02.3-3.8 is installed OR slurm_20_02-node-20.02.3-3.8 is installed OR slurm_20_02-openlava-20.02.3-3.8 is installed OR slurm_20_02-pam_slurm-20.02.3-3.8 is installed OR slurm_20_02-plugins-20.02.3-3.8 is installed OR slurm_20_02-rest-20.02.3-3.8 is installed OR slurm_20_02-seff-20.02.3-3.8 is installed OR slurm_20_02-sjstat-20.02.3-3.8 is installed OR slurm_20_02-slurmdbd-20.02.3-3.8 is installed OR slurm_20_02-sql-20.02.3-3.8 is installed OR slurm_20_02-sview-20.02.3-3.8 is installed OR slurm_20_02-torque-20.02.3-3.8 is installed OR slurm_20_02-webdoc-20.02.3-3.8 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 12 is installed AND python-requests-2.3.0-1 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 15 is installed AND Package Information kernel-azure-4.12.14-5.16 is installed OR kernel-azure-base-4.12.14-5.16 is installed OR kernel-azure-devel-4.12.14-5.16 is installed OR kernel-devel-azure-4.12.14-5.16 is installed OR kernel-source-azure-4.12.14-5.16 is installed OR kernel-syms-azure-4.12.14-5.16 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed AND Package Information rmt-server-2.5.2-3.9 is installed OR rmt-server-pubcloud-2.5.2-3.9 is installed Definition Synopsis SUSE Linux Enterprise Module for Python2 packages 15 SP1 is installed AND Package Information python-2.7.14-7.14 is installed OR python-base-2.7.14-7.14 is installed OR python-curses-2.7.14-7.14 is installed OR python-devel-2.7.14-7.14 is installed OR python-gdbm-2.7.14-7.14 is installed OR python-xml-2.7.14-7.14 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 is installed AND Package Information xen-4.10.1_06-3.3 is installed OR xen-devel-4.10.1_06-3.3 is installed OR xen-tools-4.10.1_06-3.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed AND squid-4.8-5.8 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 12 is installed AND Package Information apache2-mod_php7-7.0.7-15 is installed OR php7-7.0.7-15 is installed OR php7-bcmath-7.0.7-15 is installed OR php7-bz2-7.0.7-15 is installed OR php7-calendar-7.0.7-15 is installed OR php7-ctype-7.0.7-15 is installed OR php7-curl-7.0.7-15 is installed OR php7-dba-7.0.7-15 is installed OR php7-dom-7.0.7-15 is installed OR php7-enchant-7.0.7-15 is installed OR php7-exif-7.0.7-15 is installed OR php7-fastcgi-7.0.7-15 is installed OR php7-fileinfo-7.0.7-15 is installed OR php7-fpm-7.0.7-15 is installed OR php7-ftp-7.0.7-15 is installed OR php7-gd-7.0.7-15 is installed OR php7-gettext-7.0.7-15 is installed OR php7-gmp-7.0.7-15 is installed OR php7-iconv-7.0.7-15 is installed OR php7-imap-7.0.7-15 is installed OR php7-intl-7.0.7-15 is installed OR php7-json-7.0.7-15 is installed OR php7-ldap-7.0.7-15 is installed OR php7-mbstring-7.0.7-15 is installed OR php7-mcrypt-7.0.7-15 is installed OR php7-mysql-7.0.7-15 is installed OR php7-odbc-7.0.7-15 is installed OR php7-opcache-7.0.7-15 is installed OR php7-openssl-7.0.7-15 is installed OR php7-pcntl-7.0.7-15 is installed OR php7-pdo-7.0.7-15 is installed OR php7-pear-7.0.7-15 is installed OR php7-pear-Archive_Tar-7.0.7-15 is installed OR php7-pgsql-7.0.7-15 is installed OR php7-phar-7.0.7-15 is installed OR php7-posix-7.0.7-15 is installed OR php7-pspell-7.0.7-15 is installed OR php7-shmop-7.0.7-15 is installed OR php7-snmp-7.0.7-15 is installed OR php7-soap-7.0.7-15 is installed OR php7-sockets-7.0.7-15 is installed OR php7-sqlite-7.0.7-15 is installed OR php7-sysvmsg-7.0.7-15 is installed OR php7-sysvsem-7.0.7-15 is installed OR php7-sysvshm-7.0.7-15 is installed OR php7-tokenizer-7.0.7-15 is installed OR php7-wddx-7.0.7-15 is installed OR php7-xmlreader-7.0.7-15 is installed OR php7-xmlrpc-7.0.7-15 is installed OR php7-xmlwriter-7.0.7-15 is installed OR php7-xsl-7.0.7-15 is installed OR php7-zip-7.0.7-15 is installed OR php7-zlib-7.0.7-15 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 is installed AND Package Information apache2-mod_php7-7.2.5-4.9 is installed OR php7-7.2.5-4.9 is installed OR php7-bcmath-7.2.5-4.9 is installed OR php7-bz2-7.2.5-4.9 is installed OR php7-calendar-7.2.5-4.9 is installed OR php7-ctype-7.2.5-4.9 is installed OR php7-curl-7.2.5-4.9 is installed OR php7-dba-7.2.5-4.9 is installed OR php7-devel-7.2.5-4.9 is installed OR php7-dom-7.2.5-4.9 is installed OR php7-enchant-7.2.5-4.9 is installed OR php7-exif-7.2.5-4.9 is installed OR php7-fastcgi-7.2.5-4.9 is installed OR php7-fileinfo-7.2.5-4.9 is installed OR php7-fpm-7.2.5-4.9 is installed OR php7-ftp-7.2.5-4.9 is installed OR php7-gd-7.2.5-4.9 is installed OR php7-gettext-7.2.5-4.9 is installed OR php7-gmp-7.2.5-4.9 is installed OR php7-iconv-7.2.5-4.9 is installed OR php7-intl-7.2.5-4.9 is installed OR php7-json-7.2.5-4.9 is installed OR php7-ldap-7.2.5-4.9 is installed OR php7-mbstring-7.2.5-4.9 is installed OR php7-mysql-7.2.5-4.9 is installed OR php7-odbc-7.2.5-4.9 is installed OR php7-opcache-7.2.5-4.9 is installed OR php7-openssl-7.2.5-4.9 is installed OR php7-pcntl-7.2.5-4.9 is installed OR php7-pdo-7.2.5-4.9 is installed OR php7-pear-7.2.5-4.9 is installed OR php7-pear-Archive_Tar-7.2.5-4.9 is installed OR php7-pgsql-7.2.5-4.9 is installed OR php7-phar-7.2.5-4.9 is installed OR php7-posix-7.2.5-4.9 is installed OR php7-shmop-7.2.5-4.9 is installed OR php7-snmp-7.2.5-4.9 is installed OR php7-soap-7.2.5-4.9 is installed OR php7-sockets-7.2.5-4.9 is installed OR php7-sqlite-7.2.5-4.9 is installed OR php7-sysvmsg-7.2.5-4.9 is installed OR php7-sysvsem-7.2.5-4.9 is installed OR php7-sysvshm-7.2.5-4.9 is installed OR php7-tokenizer-7.2.5-4.9 is installed OR php7-wddx-7.2.5-4.9 is installed OR php7-xmlreader-7.2.5-4.9 is installed OR php7-xmlrpc-7.2.5-4.9 is installed OR php7-xmlwriter-7.2.5-4.9 is installed OR php7-xsl-7.2.5-4.9 is installed OR php7-zip-7.2.5-4.9 is installed OR php7-zlib-7.2.5-4.9 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND Package Information accountsservice-0.6.35-1 is installed OR accountsservice-lang-0.6.35-1 is installed OR libaccountsservice0-0.6.35-1 is installed OR typelib-1_0-AccountsService-1_0-0.6.35-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information apache2-2.4.16-5 is installed OR apache2-doc-2.4.16-5 is installed OR apache2-example-pages-2.4.16-5 is installed OR apache2-prefork-2.4.16-5 is installed OR apache2-utils-2.4.16-5 is installed OR apache2-worker-2.4.16-5 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND yast2-core-3.1.23-6 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information DirectFB-1.7.1-6 is installed OR lib++dfb-1_7-1-1.7.1-6 is installed OR libdirectfb-1_7-1-1.7.1-6 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND Package Information php5-5.5.14-11.3 is installed OR php5-devel-5.5.14-11.3 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND Package Information DirectFB-devel-1.7.1-4 is installed OR lib++dfb-devel-1.7.1-4 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND libxml2-devel-2.9.4-27.1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND enigmail-2.0.11-3.16 is installed
BACK