Oval Definition:	oval:org.opensuse.security:def:44334
Revision Date: 2020-12-01 Version: 1 Title: Security update for clamav (Moderate) Description: This update for clamav fixes the following issues: clamav was updated to version 0.100.2: - CVE-2018-15378: Vulnerability in ClamAV's MEW unpacking feature that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. (bsc#1110723) - CVE-2018-14680, CVE-2018-14681, CVE-2018-14682: more fixes for embedded libmspack. (bsc#1103040) - Make freshclam more robust against lagging signature mirrors. - On-Access 'Extra Scanning', an opt-in minor feature of OnAccess scanning on Linux systems, has been disabled due to a known issue with resource cleanup OnAccessExtraScanning will be re-enabled in a future release when the issue is resolved. In the mean-time, users who enabled the feature in clamd.conf will see a warning informing them that the feature is not active. For details, see: https://bugzilla.clamav.net/show_bug.cgi?id=12048 - Restore exit code compatibility of freshclam with versions before 0.100.0 when the virus database is already up to date (bsc#1104457). Family: unix Class: patch Status: Reference(s): 1052481 1057662 1068101 1081725 1083926 1083927 1099031 1103040 1104457 1110723 1111622 1120629 1120630 1120631 1121571 1121816 1121818 1121821 1122292 1122299 1122668 1123156 1127155 1131823 1136021 1137977 1141780 1141782 1141783 1141785 1141787 1141789 1144903 1146873 1147021 1149811 1152497 1153108 1153158 1153161 1154448 1154456 1154458 1154461 1155945 1157888 1158003 1158004 1158005 1158006 1158007 1160024 1161066 1161181 1163018 1166240 1168994 1170940 1174628 1174633 1174635 1174638 1175626 1175656 CVE-2017-1000117 CVE-2017-7826 CVE-2017-7828 CVE-2017-7830 CVE-2018-1116 CVE-2018-11212 CVE-2018-12207 CVE-2018-14680 CVE-2018-14681 CVE-2018-14682 CVE-2018-15378 CVE-2018-18074 CVE-2018-20532 CVE-2018-20533 CVE-2018-20534 CVE-2018-20685 CVE-2018-5729 CVE-2018-5730 CVE-2019-10220 CVE-2019-11135 CVE-2019-11771 CVE-2019-11772 CVE-2019-11775 CVE-2019-12068 CVE-2019-15890 CVE-2019-17133 CVE-2019-18420 CVE-2019-18421 CVE-2019-18424 CVE-2019-18425 CVE-2019-19577 CVE-2019-19578 CVE-2019-19579 CVE-2019-19580 CVE-2019-19581 CVE-2019-19583 CVE-2019-2449 CVE-2019-2762 CVE-2019-2766 CVE-2019-2769 CVE-2019-2786 CVE-2019-2816 CVE-2019-4473 CVE-2019-6109 CVE-2019-6110 CVE-2019-6111 CVE-2019-6778 CVE-2019-7317 CVE-2020-10713 CVE-2020-14344 CVE-2020-14345 CVE-2020-14346 CVE-2020-14347 CVE-2020-1711 CVE-2020-1983 CVE-2020-7039 CVE-2020-7211 CVE-2020-8608 SUSE-SU-2017:2320-1 SUSE-SU-2017:3213-1 SUSE-SU-2018:0846-1 SUSE-SU-2018:2163-1 SUSE-SU-2018:3436-1 SUSE-SU-2019:0132-1 SUSE-SU-2019:1610-1 SUSE-SU-2019:2371-1 SUSE-SU-2020:1538-1 SUSE-SU-2020:2331-1 SUSE-SU-2020:2627-1 SUSE-SU-2020:2660-1 Platform(s): openSUSE Leap 15.0 openSUSE Leap 42.3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for additional PackageHub packages 15 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for High Performance Computing 15 SP1 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 SUSE Linux Enterprise Module for Public Cloud 15 SUSE Linux Enterprise Module for Python2 packages 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Web Scripting 15 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP2-BCL SUSE Linux Enterprise Server for SAP Applications 12 SP2-ESPOS SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP3-BCL SUSE Linux Enterprise Server for SAP Applications 12 SP3-ESPOS SUSE Linux Enterprise Server for SAP Applications 12 SP3-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP3-TERADATA SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP4-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE OpenStack Cloud 7 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND Package Information libncurses5-6.1-lp150.4.3 is installed OR libncurses5-32bit-6.1-lp150.4.3 is installed OR libncurses6-6.1-lp150.4.3 is installed OR libncurses6-32bit-6.1-lp150.4.3 is installed OR ncurses-6.1-lp150.4.3 is installed OR ncurses-devel-6.1-lp150.4.3 is installed OR ncurses-devel-32bit-6.1-lp150.4.3 is installed OR ncurses-utils-6.1-lp150.4.3 is installed OR ncurses5-devel-6.1-lp150.4.3 is installed OR ncurses5-devel-32bit-6.1-lp150.4.3 is installed OR tack-6.1-lp150.4.3 is installed OR terminfo-6.1-lp150.4.3 is installed OR terminfo-base-6.1-lp150.4.3 is installed OR terminfo-iterm-6.1-lp150.4.3 is installed OR terminfo-screen-6.1-lp150.4.3 is installed Definition Synopsis openSUSE Leap 42.3 is installed AND Package Information libavcodec57-3.3.1-1 is installed OR libavdevice57-3.3.1-1 is installed OR libavfilter6-3.3.1-1 is installed OR libavformat57-3.3.1-1 is installed OR libavresample3-3.3.1-1 is installed OR libavutil55-3.3.1-1 is installed OR libpostproc54-3.3.1-1 is installed OR libswresample2-3.3.1-1 is installed OR libswscale4-3.3.1-1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information aaa_base-13.2+git20140911.61c1681-1 is installed OR aaa_base-extras-13.2+git20140911.61c1681-1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND autofs-5.0.9-8 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information ImageMagick-6.8.8.1-33 is installed OR libMagick++-6_Q16-3-6.8.8.1-33 is installed OR libMagickCore-6_Q16-1-6.8.8.1-33 is installed OR libMagickCore-6_Q16-1-32bit-6.8.8.1-33 is installed OR libMagickWand-6_Q16-1-6.8.8.1-33 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information curl-7.37.0-36 is installed OR libcurl4-7.37.0-36 is installed OR libcurl4-32bit-7.37.0-36 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information NetworkManager-1.0.12-13.6 is installed OR NetworkManager-lang-1.0.12-13.6 is installed OR libnm-glib-vpn1-1.0.12-13.6 is installed OR libnm-glib4-1.0.12-13.6 is installed OR libnm-util2-1.0.12-13.6 is installed OR libnm0-1.0.12-13.6 is installed OR typelib-1_0-NM-1_0-1.0.12-13.6 is installed OR typelib-1_0-NMClient-1_0-1.0.12-13.6 is installed OR typelib-1_0-NetworkManager-1_0-1.0.12-13.6 is installed Definition Synopsis SUSE Linux Enterprise Module for additional PackageHub packages 15 is installed AND Package Information php7-7.2.5-4.46 is installed OR php7-embed-7.2.5-4.46 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 is installed AND Package Information libsqlite3-0-3.23.1-1 is installed OR libsqlite3-0-32bit-3.23.1-1 is installed OR sqlite3-3.23.1-1 is installed OR sqlite3-devel-3.23.1-1 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed AND gzip-1.9-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 is installed AND Package Information libmpg123-0-1.25.10-1 is installed OR libout123-0-1.25.10-1 is installed OR mpg123-1.25.10-1 is installed OR mpg123-devel-1.25.10-1 is installed OR mpg123-pulse-1.25.10-1 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed AND Package Information MozillaFirefox-60.7.0-3.40 is installed OR MozillaFirefox-devel-60.7.0-3.40 is installed OR MozillaFirefox-translations-common-60.7.0-3.40 is installed OR MozillaFirefox-translations-other-60.7.0-3.40 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 SP2 is installed AND Package Information MozillaFirefox-68.6.1-3.81 is installed OR MozillaFirefox-devel-68.6.1-3.81 is installed OR MozillaFirefox-translations-common-68.6.1-3.81 is installed OR MozillaFirefox-translations-other-68.6.1-3.81 is installed Definition Synopsis SUSE Linux Enterprise Module for High Performance Computing 15 SP1 is installed AND Package Information python-numpy_1_16_1-gnu-hpc-1.16.1-4.8 is installed OR python2-numpy-gnu-hpc-1.16.1-4.8 is installed OR python2-numpy-gnu-hpc-devel-1.16.1-4.8 is installed OR python3-numpy-gnu-hpc-1.16.1-4.8 is installed OR python3-numpy-gnu-hpc-devel-1.16.1-4.8 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 is installed AND Package Information kernel-livepatch-4_12_14-25_6-default-2-2 is installed OR kernel-livepatch-SLE15_Update_2-2-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND Package Information kernel-livepatch-4_12_14-195-default-7-19 is installed OR kernel-livepatch-SLE15-SP1_Update_0-7-19 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 is installed AND Package Information openssh-7.6p1-9.3 is installed OR openssh-cavs-7.6p1-9.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed AND Package Information bind-9.11.2-12.13 is installed OR bind-devel-32bit-9.11.2-12.13 is installed OR bind-lwresd-9.11.2-12.13 is installed OR libbind9-160-32bit-9.11.2-12.13 is installed OR libdns169-32bit-9.11.2-12.13 is installed OR libirs160-32bit-9.11.2-12.13 is installed OR libisc166-32bit-9.11.2-12.13 is installed OR libisccc160-32bit-9.11.2-12.13 is installed OR libisccfg160-32bit-9.11.2-12.13 is installed OR liblwres160-32bit-9.11.2-12.13 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 15 is installed AND Package Information kernel-azure-4.12.14-5.47 is installed OR kernel-azure-base-4.12.14-5.47 is installed OR kernel-azure-devel-4.12.14-5.47 is installed OR kernel-devel-azure-4.12.14-5.47 is installed OR kernel-source-azure-4.12.14-5.47 is installed OR kernel-syms-azure-4.12.14-5.47 is installed Definition Synopsis SUSE Linux Enterprise Module for Python2 packages 15 SP1 is installed AND python2-urllib3-1.24-7 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 is installed AND Package Information libupsclient1-2.7.4-4 is installed OR nut-2.7.4-4 is installed OR nut-devel-2.7.4-4 is installed OR nut-drivers-net-2.7.4-4 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed AND Package Information libvirglrenderer0-0.6.0-4.3 is installed OR virglrenderer-0.6.0-4.3 is installed OR virglrenderer-devel-0.6.0-4.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 is installed AND xalan-j2-2.7.2-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kgraft-patch-3_12_74-60_64_66-default-5-2 is installed OR kgraft-patch-3_12_74-60_64_66-xen-5-2 is installed OR kgraft-patch-SLE12-SP1_Update_23-5-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information groff-1.22.2-5 is installed OR groff-full-1.22.2-5 is installed OR gxditview-1.22.2-5 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP2-BCL is installed AND clamav-0.100.2-33.18 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP2-BCL is installed AND clamav-0.100.2-33.18 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information kernel-firmware-20170530-21.22 is installed OR ucode-amd-20170530-21.22 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND libX11-1.6.2-12.12 is installed OR libX11-6-1.6.2-12.12 is installed OR libX11-6-32bit-1.6.2-12.12 is installed OR libX11-data-1.6.2-12.12 is installed OR libX11-xcb1-1.6.2-12.12 is installed OR libX11-xcb1-32bit-1.6.2-12.12 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP2-ESPOS is installed AND libX11-1.6.2-12.12 is installed OR libX11-6-1.6.2-12.12 is installed OR libX11-6-32bit-1.6.2-12.12 is installed OR libX11-data-1.6.2-12.12 is installed OR libX11-xcb1-1.6.2-12.12 is installed OR libX11-xcb1-32bit-1.6.2-12.12 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information res-signingkeys-3.0.37-52.23 is installed OR smt-3.0.37-52.23 is installed OR smt-support-3.0.37-52.23 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information java-1_8_0-openjdk-1.8.0.171-27.19 is installed OR java-1_8_0-openjdk-demo-1.8.0.171-27.19 is installed OR java-1_8_0-openjdk-devel-1.8.0.171-27.19 is installed OR java-1_8_0-openjdk-headless-1.8.0.171-27.19 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP3 is installed AND git-2.12.3-27.5 is installed OR git-core-2.12.3-27.5 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed AND git-2.12.3-27.5 is installed OR git-core-2.12.3-27.5 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information libXp6-1.0.2-3 is installed OR libXp6-32bit-1.0.2-3 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP3-BCL is installed AND java-1_8_0-ibm-1.8.0_sr5.40-30.54 is installed OR java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54 is installed OR java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP3-BCL is installed AND java-1_8_0-ibm-1.8.0_sr5.40-30.54 is installed OR java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54 is installed OR java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND ghostscript-9.27-23.31 is installed OR ghostscript-x11-9.27-23.31 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP3-ESPOS is installed AND ghostscript-9.27-23.31 is installed OR ghostscript-x11-9.27-23.31 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND kgraft-patch-4_4_162-94_69-default-7-2 is installed OR kgraft-patch-SLE12-SP3_Update_21-7-2 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP3-LTSS is installed AND kgraft-patch-4_4_162-94_69-default-7-2 is installed OR kgraft-patch-SLE12-SP3_Update_21-7-2 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND libsndfile-1.0.25-36.16 is installed OR libsndfile1-1.0.25-36.16 is installed OR libsndfile1-32bit-1.0.25-36.16 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP3-TERADATA is installed AND libsndfile-1.0.25-36.16 is installed OR libsndfile1-1.0.25-36.16 is installed OR libsndfile1-32bit-1.0.25-36.16 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP4 is installed AND apache2-2.4.23-29.27 is installed OR apache2-doc-2.4.23-29.27 is installed OR apache2-example-pages-2.4.23-29.27 is installed OR apache2-prefork-2.4.23-29.27 is installed OR apache2-utils-2.4.23-29.27 is installed OR apache2-worker-2.4.23-29.27 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed AND apache2-2.4.23-29.27 is installed OR apache2-doc-2.4.23-29.27 is installed OR apache2-example-pages-2.4.23-29.27 is installed OR apache2-prefork-2.4.23-29.27 is installed OR apache2-utils-2.4.23-29.27 is installed OR apache2-worker-2.4.23-29.27 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP4-LTSS is installed AND xorg-x11-server-1.19.6-4.8 is installed OR xorg-x11-server-extra-1.19.6-4.8 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP4-LTSS is installed AND xorg-x11-server-1.19.6-4.8 is installed OR xorg-x11-server-extra-1.19.6-4.8 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP5 is installed AND MozillaFirefox-68.8.0-109.119 is installed OR MozillaFirefox-translations-common-68.8.0-109.119 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed AND MozillaFirefox-68.8.0-109.119 is installed OR MozillaFirefox-translations-common-68.8.0-109.119 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND Package Information libssh-0.6.3-4 is installed OR libssh4-0.6.3-4 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND Package Information ImageMagick-6.8.8.1-71.42 is installed OR libMagick++-6_Q16-3-6.8.8.1-71.42 is installed OR libMagickCore-6_Q16-1-32bit-6.8.8.1-71.42 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND Package Information libpodofo0_9_2-0.9.2-3.6 is installed OR podofo-0.9.2-3.6 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND Package Information gstreamer-plugins-ugly-1.12.5-1 is installed OR gstreamer-plugins-ugly-lang-1.12.5-1 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND Package Information openstack-aodh-3.0.4~a0~dev1-2.3 is installed OR openstack-aodh-api-3.0.4~a0~dev1-2.3 is installed OR openstack-aodh-doc-3.0.4~a0~dev1-2.3 is installed OR openstack-aodh-evaluator-3.0.4~a0~dev1-2.3 is installed OR openstack-aodh-expirer-3.0.4~a0~dev1-2.3 is installed OR openstack-aodh-listener-3.0.4~a0~dev1-2.3 is installed OR openstack-aodh-notifier-3.0.4~a0~dev1-2.3 is installed OR python-aodh-3.0.4~a0~dev1-2.3 is installed
BACK