Oval Definition:	oval:org.opensuse.security:def:4242
Revision Date: 2022-01-12 Version: 1 Title: Security update for SDL2 (Important) (in QA) Description: This update for SDL2 fixes the following issues: - CVE-2020-14409: Fixed Integer Overflow resulting in heap corruption in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP (bsc#1181202). - CVE-2020-14410: Fixed heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP (bsc#1181201). This patch is currently in QA and not yet available for download. Family: unix Class: patch Status: Reference(s): 1027519 1046540 1050319 1050536 1050540 1051510 1055117 1055120 1065600 1066674 1067126 1067906 1071995 1076830 1079524 1083647 1083710 1084760 1084831 1086283 1086288 1094825 1095805 1097158 1097748 1099125 1100132 1102247 1102881 1103308 1103543 1104731 1105019 1105025 1105536 1106105 1106110 1106237 1106240 1106838 1107685 1108241 1108377 1108468 1108828 1108841 1108870 1109151 1109158 1109217 1109330 1109739 1109784 1109806 1109818 1109907 1109911 1109915 1109919 1109951 1110006 1110096 1110538 1110561 1110921 1111028 1111076 1111506 1111806 1111819 1111830 1111834 1111841 1111870 1111901 1111904 1111928 1111983 1112170 1112173 1112208 1112219 1112221 1112246 1112372 1112514 1112554 1112708 1112710 1112711 1112712 1112713 1112731 1112732 1112733 1112734 1112735 1112736 1112738 1112739 1112740 1112741 1112743 1112745 1112746 1112894 1112899 1112902 1112903 1112905 1112906 1112907 1113257 1113284 1113969 1119222 1119454 1123080 1127034 1127315 1129770 1130972 1132091 1133021 1133191 1134097 1134390 1134399 1135280 1135335 1135642 1136446 1136935 1137458 1137534 1137535 1137584 1137597 1137609 1137827 1139358 1140133 1140322 1140652 1140903 1140945 1141401 1141402 1141452 1141453 1141454 1141478 1142023 1142112 1142220 1142221 1142254 1142350 1142351 1142354 1142359 1142450 1142701 1142868 1143003 1143045 1143105 1143185 1143189 1143191 1143507 1144524 1146848 1150711 1155690 1156202 1160682 1162687 1162689 1162691 1166847 1166916 1172175 1172176 1172177 1172182 1172184 1172186 1172442 1172443 1172686 1172728 1173351 1173937 1174955 1175465 1175476 1175574 1176430 1177155 1177480 1177950 1178591 1181201 1181202 CVE-2017-16533 CVE-2017-18224 CVE-2018-0732 CVE-2018-12115 CVE-2018-16468 CVE-2018-18386 CVE-2018-18445 CVE-2018-20855 CVE-2019-11023 CVE-2019-11085 CVE-2019-1125 CVE-2019-11477 CVE-2019-11478 CVE-2019-11487 CVE-2019-11810 CVE-2019-12528 CVE-2019-13456 CVE-2019-13631 CVE-2019-13648 CVE-2019-14283 CVE-2019-14284 CVE-2019-14562 CVE-2019-16770 CVE-2019-17185 CVE-2019-20372 CVE-2019-3846 CVE-2019-5418 CVE-2019-5419 CVE-2019-5420 CVE-2020-11076 CVE-2020-11076 CVE-2020-11077 CVE-2020-11077 CVE-2020-11080 CVE-2020-14409 CVE-2020-14410 CVE-2020-15095 CVE-2020-15169 CVE-2020-15708 CVE-2020-25637 CVE-2020-28368 CVE-2020-5247 CVE-2020-5249 CVE-2020-5267 CVE-2020-7598 CVE-2020-8164 CVE-2020-8165 CVE-2020-8166 CVE-2020-8167 CVE-2020-8174 CVE-2020-8184 CVE-2020-8185 CVE-2020-8449 CVE-2020-8450 CVE-2020-8517 SUSE-SU-2018:2812-1 SUSE-SU-2018:3593-1 SUSE-SU-2018:3928-1 SUSE-SU-2019:1267-2 SUSE-SU-2020:0493-1 SUSE-SU-2020:1023-1 SUSE-SU-2020:1171-1 SUSE-SU-2020:1919-1 SUSE-SU-2020:2691-1 SUSE-SU-2020:2800-1 SUSE-SU-2020:3037-1 SUSE-SU-2020:3160-1 SUSE-SU-2020:3413-1 Platform(s): SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Desktop 15 SP3 SUSE Linux Enterprise for SAP 12 SUSE Linux Enterprise for SAP 12 SP1 SUSE Linux Enterprise High Availability 12 SP2 SUSE Linux Enterprise High Availability 12 SP3 SUSE Linux Enterprise High Availability 12 SP4 SUSE Linux Enterprise High Availability 15 SUSE Linux Enterprise High Availability 15 SP1 SUSE Linux Enterprise High Availability 15 SP2 SUSE Linux Enterprise High Performance Computing 15 SP3 SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Live Patching 12 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Web Scripting 12 SUSE Linux Enterprise Module for Web Scripting 15 SUSE Linux Enterprise Module for Web Scripting 15 SP2 SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Server 11 SP1-LTSS SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 15 SP3 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 Product(s): Definition Synopsis SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed AND Package Information openstack-neutron-2014.2.2.dev26-3 is installed OR openstack-neutron-dhcp-agent-2014.2.2.dev26-3 is installed OR openstack-neutron-ha-tool-2014.2.2.dev26-3 is installed OR openstack-neutron-l3-agent-2014.2.2.dev26-3 is installed OR openstack-neutron-lbaas-agent-2014.2.2.dev26-3 is installed OR openstack-neutron-linuxbridge-agent-2014.2.2.dev26-3 is installed OR openstack-neutron-metadata-agent-2014.2.2.dev26-3 is installed OR openstack-neutron-metering-agent-2014.2.2.dev26-3 is installed OR openstack-neutron-openvswitch-agent-2014.2.2.dev26-3 is installed OR openstack-neutron-vpn-agent-2014.2.2.dev26-3 is installed OR python-neutron-2014.2.2.dev26-3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information libmysql55client18-5.5.47-0.17.1 is installed OR libmysql55client18-32bit-5.5.47-0.17.1 is installed OR libmysql55client_r18-5.5.47-0.17.1 is installed OR libmysql55client_r18-32bit-5.5.47-0.17.1 is installed OR mysql-5.5.47-0.17.1 is installed OR mysql-client-5.5.47-0.17.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND clamav-0.98.4-1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information hplip-3.14.6-3 is installed OR hplip-hpijs-3.14.6-3 is installed OR hplip-sane-3.14.6-3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND autofs-5.0.9-21 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information at-3.1.14-7 is installed OR libQtWebKit4-4.8.6+2.3.3-3 is installed OR libQtWebKit4-32bit-4.8.6+2.3.3-3 is installed OR libbonobo-2.32.1-16 is installed OR libbonobo-32bit-2.32.1-16 is installed OR libbonobo-lang-2.32.1-16 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information at-3.1.14-8.6 is installed OR libQtWebKit4-4.8.7+2.3.4-4.7 is installed OR libQtWebKit4-32bit-4.8.7+2.3.4-4.7 is installed OR libbonobo-2.32.1-16 is installed OR libbonobo-32bit-2.32.1-16 is installed OR libbonobo-lang-2.32.1-16 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 SP3 is installed AND Package Information libSDL2-2_0-0-2.0.8-11.3.1 is installed OR libSDL2-devel-2.0.8-11.3.1 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 is installed AND Package Information postgresql93-9.3.17-24.2 is installed OR postgresql93-contrib-9.3.17-24.2 is installed OR postgresql93-docs-9.3.17-24.2 is installed OR postgresql93-server-9.3.17-24.2 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 SP1 is installed AND Package Information compat-openssl098-0.9.8j-94.1 is installed OR libopenssl0_9_8-0.9.8j-94.1 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP2 is installed AND conntrack-tools-1.4.2-5 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP3 is installed AND ctdb-4.6.5+git.27.6afd48b1083-2 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP4 is installed AND conntrack-tools-1.4.2-5 is installed Definition Synopsis SUSE Linux Enterprise High Availability 15 is installed AND Package Information ruby2.5-rubygem-loofah-2.2.2-4.3 is installed OR rubygem-loofah-2.2.2-4.3 is installed Definition Synopsis SUSE Linux Enterprise High Availability 15 SP1 is installed AND Package Information graphviz-addons-2.40.1-6.3 is installed OR graphviz-gd-2.40.1-6.3 is installed OR graphviz-python-2.40.1-6.3 is installed Definition Synopsis SUSE Linux Enterprise High Availability 15 SP2 is installed AND Package Information ruby2.5-rubygem-puma-4.3.5-3.3 is installed OR rubygem-puma-4.3.5-3.3 is installed Definition Synopsis Release Information SUSE Linux Enterprise High Performance Computing 15-ESPOS is installed AND freeradius-server-3.0.16-3.6 is installed OR freeradius-server-devel-3.0.16-3.6 is installed OR freeradius-server-krb5-3.0.16-3.6 is installed OR freeradius-server-ldap-3.0.16-3.6 is installed OR freeradius-server-libs-3.0.16-3.6 is installed OR freeradius-server-mysql-3.0.16-3.6 is installed OR freeradius-server-perl-3.0.16-3.6 is installed OR freeradius-server-postgresql-3.0.16-3.6 is installed OR freeradius-server-python-3.0.16-3.6 is installed OR freeradius-server-sqlite-3.0.16-3.6 is installed OR freeradius-server-utils-3.0.16-3.6 is installed OR Package Information SUSE Linux Enterprise High Performance Computing 15-LTSS is installed AND freeradius-server-3.0.16-3.6 is installed OR freeradius-server-devel-3.0.16-3.6 is installed OR freeradius-server-krb5-3.0.16-3.6 is installed OR freeradius-server-ldap-3.0.16-3.6 is installed OR freeradius-server-libs-3.0.16-3.6 is installed OR freeradius-server-mysql-3.0.16-3.6 is installed OR freeradius-server-perl-3.0.16-3.6 is installed OR freeradius-server-postgresql-3.0.16-3.6 is installed OR freeradius-server-python-3.0.16-3.6 is installed OR freeradius-server-sqlite-3.0.16-3.6 is installed OR freeradius-server-utils-3.0.16-3.6 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 SP3 is installed AND Package Information kgraft-patch-4_4_131-94_29-default-4-2 is installed OR kgraft-patch-SLE12-SP3_Update_12-4-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 is installed AND Package Information kernel-default-4.12.14-25.25 is installed OR kernel-default-livepatch-4.12.14-25.25 is installed OR kernel-livepatch-4_12_14-25_25-default-1-1.3 is installed OR kernel-livepatch-SLE15_Update_7-1-1.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 12 is installed AND Package Information kernel-ec2-3.12.53-60.30.1 is installed OR kernel-ec2-devel-3.12.53-60.30.1 is installed OR kernel-ec2-extra-3.12.53-60.30.1 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed AND Package Information libvirt-5.1.0-8.24 is installed OR libvirt-admin-5.1.0-8.24 is installed OR libvirt-bash-completion-5.1.0-8.24 is installed OR libvirt-client-5.1.0-8.24 is installed OR libvirt-daemon-5.1.0-8.24 is installed OR libvirt-daemon-config-network-5.1.0-8.24 is installed OR libvirt-daemon-config-nwfilter-5.1.0-8.24 is installed OR libvirt-daemon-driver-interface-5.1.0-8.24 is installed OR libvirt-daemon-driver-libxl-5.1.0-8.24 is installed OR libvirt-daemon-driver-lxc-5.1.0-8.24 is installed OR libvirt-daemon-driver-network-5.1.0-8.24 is installed OR libvirt-daemon-driver-nodedev-5.1.0-8.24 is installed OR libvirt-daemon-driver-nwfilter-5.1.0-8.24 is installed OR libvirt-daemon-driver-qemu-5.1.0-8.24 is installed OR libvirt-daemon-driver-secret-5.1.0-8.24 is installed OR libvirt-daemon-driver-storage-5.1.0-8.24 is installed OR libvirt-daemon-driver-storage-core-5.1.0-8.24 is installed OR libvirt-daemon-driver-storage-disk-5.1.0-8.24 is installed OR libvirt-daemon-driver-storage-iscsi-5.1.0-8.24 is installed OR libvirt-daemon-driver-storage-logical-5.1.0-8.24 is installed OR libvirt-daemon-driver-storage-mpath-5.1.0-8.24 is installed OR libvirt-daemon-driver-storage-rbd-5.1.0-8.24 is installed OR libvirt-daemon-driver-storage-scsi-5.1.0-8.24 is installed OR libvirt-daemon-hooks-5.1.0-8.24 is installed OR libvirt-daemon-lxc-5.1.0-8.24 is installed OR libvirt-daemon-qemu-5.1.0-8.24 is installed OR libvirt-daemon-xen-5.1.0-8.24 is installed OR libvirt-devel-5.1.0-8.24 is installed OR libvirt-doc-5.1.0-8.24 is installed OR libvirt-lock-sanlock-5.1.0-8.24 is installed OR libvirt-nss-5.1.0-8.24 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP2 is installed AND Package Information ovmf-201911-7.5 is installed OR ovmf-tools-201911-7.5 is installed OR qemu-ovmf-x86_64-201911-7.5 is installed OR qemu-uefi-aarch64-201911-7.5 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 is installed AND Package Information nodejs8-8.11.4-3.8 is installed OR nodejs8-devel-8.11.4-3.8 is installed OR nodejs8-docs-8.11.4-3.8 is installed OR npm8-8.11.4-3.8 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 SP2 is installed AND Package Information nodejs8-8.17.0-10.3 is installed OR nodejs8-devel-8.17.0-10.3 is installed OR nodejs8-docs-8.17.0-10.3 is installed OR npm8-8.17.0-10.3 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3 is installed AND Package Information pango-1.26.2-1.3.1 is installed OR pango-32bit-1.26.2-1.3.1 is installed OR pango-doc-1.26.2-1.3.1 is installed OR pango-x86-1.26.2-1.3.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND ipsec-tools-0.7.3-1.4.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND apache2-mod_nss-1.0.8-9 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND apache2-mod_nss-1.0.8-13 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information bind-9.9.9P1-46 is installed OR bind-chrootenv-9.9.9P1-46 is installed OR bind-doc-9.9.9P1-46 is installed OR bind-libs-9.9.9P1-46 is installed OR bind-libs-32bit-9.9.9P1-46 is installed OR bind-utils-9.9.9P1-46 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND libmodplug1-0.8.9.0+git20170610.f6dd59a-15.4 is installed Definition Synopsis SUSE Linux Enterprise Server 15-LTSS is installed AND Package Information libjavascriptcoregtk-4_0-18-2.28.1-3.49 is installed OR libwebkit2gtk-4_0-37-2.28.1-3.49 is installed OR libwebkit2gtk3-lang-2.28.1-3.49 is installed OR webkit2gtk-4_0-injected-bundles-2.28.1-3.49 is installed OR webkit2gtk3-2.28.1-3.49 is installed OR webkit2gtk3-devel-2.28.1-3.49 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND Package Information MozillaFirefox-45.4.0esr-81 is installed OR MozillaFirefox-translations-45.4.0esr-81 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information dpdk-18.11.3-3.19 is installed OR dpdk-devel-18.11.3-3.19 is installed OR dpdk-kmp-default-18.11.3_k4.12.14_150.47-3.19 is installed OR dpdk-tools-18.11.3-3.19 is installed OR libdpdk-18_11-18.11.3-3.19 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND Package Information php53-devel-5.3.8-0.43.1 is installed OR php53-imap-5.3.8-0.43.1 is installed OR php53-posix-5.3.8-0.43.1 is installed OR php53-readline-5.3.8-0.43.1 is installed OR php53-sockets-5.3.8-0.43.1 is installed OR php53-sqlite-5.3.8-0.43.1 is installed OR php53-tidy-5.3.8-0.43.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND Package Information finch-devel-2.10.9-8.1 is installed OR libpurple-2.10.9-8.1 is installed OR libpurple-devel-2.10.9-8.1 is installed OR libpurple-lang-2.10.9-8.1 is installed OR pidgin-2.10.9-8.1 is installed OR pidgin-devel-2.10.9-8.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND Package Information bind-9.9.6P1-32.1 is installed OR bind-devel-9.9.6P1-32.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information sudo-1.8.10p3-8.1 is installed OR sudo-devel-1.8.10p3-8.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND libssh2-devel-1.4.3-19 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND cyrus-sasl-digestmd5-32bit-2.1.26-7 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND Package Information ImageMagick-6.8.8.1-8 is installed OR libMagick++-6_Q16-3-6.8.8.1-8 is installed OR libMagickCore-6_Q16-1-32bit-6.8.8.1-8 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND bogofilter-1.2.4-5 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND argyllcms-1.6.3-3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information kernel-default-4.12.14-150.17 is installed OR kernel-default-extra-4.12.14-150.17 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND Package Information MozillaThunderbird-60.7.0-3.36 is installed OR MozillaThunderbird-translations-common-60.7.0-3.36 is installed OR MozillaThunderbird-translations-other-60.7.0-3.36 is installed
BACK