Oval Definition:	oval:org.opensuse.security:def:45535
Revision Date: 2020-12-01 Version: 1 Title: Security update for atftp (Important) Description: This update for atftp fixes the following issues: Security issues fixed: - CVE-2019-11366: Fixed a denial of service caused by a NULL pointer dereference because thread_list_mutex was not locked (bsc#1133145). - CVE-2019-11365: Fixed a buffer overflow which could lead to remote code execution caused by an insecure use of strncpy() (bsc#1133114). Family: unix Class: patch Status: Reference(s): 1005778 1005780 1005781 1012382 1019695 1019696 1022604 1032089 1037008 1037009 1059134 1059139 1063638 1065600 1077358 1085535 1085539 1090888 1099510 1099658 1100132 1101288 1106110 1106284 1106929 1108293 1108308 1108838 1110785 1110946 1112063 1112178 1113160 1115034 1116803 1117562 1119086 1120642 1120653 1120654 1120843 1120902 1122776 1124341 1124342 1126040 1126356 1128052 1129138 1129770 1130972 1131107 1131488 1131565 1132212 1132472 1133114 1133145 1133188 1133874 1134160 1134162 1134195 1134338 1134537 1134564 1134565 1134566 1134651 1134760 1134806 1134813 1134848 1135013 1135014 1135015 1135100 1135120 1135281 1135603 1135642 1135661 1135878 1136424 1136438 1136448 1136449 1136451 1136452 1136455 1136458 1136539 1136573 1136575 1136586 1136590 1136623 1136810 1136935 1136990 1137142 1137162 1137586 1138822 1141661 1142038 1142772 1143913 1145692 1148177 1150114 1153090 1153277 1154940 1154968 1155079 1155372 1159856 1159858 1159860 1160249 1160250 1160251 1160937 1161982 1163871 1164692 1165680 1165921 1168310 1169952 1170231 1170557 1171550 1171687 1172265 1172405 1172462 1176756 1177872 843419 925502 995352 CVE-2015-2775 CVE-2016-10209 CVE-2016-10349 CVE-2016-10350 CVE-2016-6893 CVE-2017-14501 CVE-2017-14502 CVE-2017-9103 CVE-2017-9103 CVE-2017-9104 CVE-2017-9104 CVE-2017-9105 CVE-2017-9105 CVE-2017-9106 CVE-2017-9106 CVE-2017-9107 CVE-2017-9107 CVE-2017-9108 CVE-2017-9108 CVE-2017-9109 CVE-2017-9109 CVE-2018-0618 CVE-2018-1000877 CVE-2018-1000878 CVE-2018-13796 CVE-2018-17972 CVE-2018-5950 CVE-2018-7191 CVE-2019-1000019 CVE-2019-1000020 CVE-2019-1010180 CVE-2019-10215 CVE-2019-11190 CVE-2019-11365 CVE-2019-11366 CVE-2019-11477 CVE-2019-11478 CVE-2019-11479 CVE-2019-11486 CVE-2019-11815 CVE-2019-11833 CVE-2019-11884 CVE-2019-12382 CVE-2019-15043 CVE-2019-15691 CVE-2019-15692 CVE-2019-15693 CVE-2019-15694 CVE-2019-15695 CVE-2019-16167 CVE-2019-18408 CVE-2019-20433 CVE-2019-3846 CVE-2019-5489 CVE-2020-12245 CVE-2020-13379 CVE-2020-15683 CVE-2020-15969 CVE-2020-1938 CVE-2020-2752 CVE-2020-2812 CVE-2020-8022 SUSE-SU-2018:4296-1 SUSE-SU-2019:1091-1 SUSE-SU-2019:1532-1 SUSE-SU-2019:3092-1 SUSE-SU-2020:1612-1 SUSE-SU-2020:1749-1 SUSE-SU-2020:1788-1 Platform(s): openSUSE Leap 15.0 openSUSE Leap 42.3 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for additional PackageHub packages 15 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Module for Legacy Software 15 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 SUSE Linux Enterprise Module for Public Cloud 15 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Linux Enterprise Module for Python2 packages 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP3-ESPOS SUSE Linux Enterprise Server for SAP Applications 12 SP3-TERADATA SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP4-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND Package Information guestfs-data-1.38.0-lp150.2 is installed OR libguestfs0-1.38.0-lp150.2 is installed OR virt-v2v-1.38.0-lp150.2 is installed Definition Synopsis openSUSE Leap 42.3 is installed AND Package Information krb5-1.12.5-7 is installed OR krb5-32bit-1.12.5-7 is installed OR krb5-client-1.12.5-7 is installed OR krb5-devel-1.12.5-7 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information libtasn1-1.5-1.28 is installed OR libtasn1-3-1.5-1.28 is installed OR libtasn1-3-32bit-1.5-1.28 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information avahi-0.6.31-20 is installed OR avahi-lang-0.6.31-20 is installed OR libavahi-client3-0.6.31-20 is installed OR libavahi-client3-32bit-0.6.31-20 is installed OR libavahi-common3-0.6.31-20 is installed OR libavahi-common3-32bit-0.6.31-20 is installed OR libavahi-core7-0.6.31-20 is installed OR libdns_sd-0.6.31-20 is installed OR libdns_sd-32bit-0.6.31-20 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information gd-2.1.0-5 is installed OR gd-32bit-2.1.0-5 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information glibc-2.22-49 is installed OR glibc-32bit-2.22-49 is installed OR glibc-devel-2.22-49 is installed OR glibc-devel-32bit-2.22-49 is installed OR glibc-i18ndata-2.22-49 is installed OR glibc-locale-2.22-49 is installed OR glibc-locale-32bit-2.22-49 is installed OR nscd-2.22-49 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information cron-4.2-58 is installed OR cronie-1.4.11-58 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information curl-7.60.0-2 is installed OR libcurl4-7.60.0-2 is installed OR libcurl4-32bit-7.60.0-2 is installed Definition Synopsis SUSE Linux Enterprise Module for additional PackageHub packages 15 is installed AND Package Information java-1_8_0-openjdk-1.8.0.222-3.24 is installed OR java-1_8_0-openjdk-javadoc-1.8.0.222-3.24 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 is installed AND Package Information libmpfr6-4.0.1-1 is installed OR mpfr-devel-4.0.1-1 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed AND Package Information apparmor-abstractions-2.12.2-7.17 is installed OR apparmor-docs-2.12.2-7.17 is installed OR apparmor-parser-2.12.2-7.17 is installed OR apparmor-parser-lang-2.12.2-7.17 is installed OR apparmor-profiles-2.12.2-7.17 is installed OR apparmor-utils-2.12.2-7.17 is installed OR apparmor-utils-lang-2.12.2-7.17 is installed OR pam_apparmor-2.12.2-7.17 is installed OR pam_apparmor-32bit-2.12.2-7.17 is installed OR perl-apparmor-2.12.2-7.17 is installed OR python3-apparmor-2.12.2-7.17 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 is installed AND Package Information gd-2.2.5-2 is installed OR gd-devel-2.2.5-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 is installed AND Package Information kernel-default-4.12.14-25.19 is installed OR reiserfs-kmp-default-4.12.14-25.19 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 is installed AND Package Information kernel-livepatch-4_12_14-25_22-default-5-2 is installed OR kernel-livepatch-SLE15_Update_6-5-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 is installed AND Package Information bluez-5.48-5.8 is installed OR bluez-auto-enable-devices-5.48-5.8 is installed OR bluez-test-5.48-5.8 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed AND Package Information xen-4.12.1_06-3.9 is installed OR xen-devel-4.12.1_06-3.9 is installed OR xen-doc-html-4.12.1_06-3.9 is installed OR xen-libs-4.12.1_06-3.9 is installed OR xen-libs-32bit-4.12.1_06-3.9 is installed OR xen-tools-4.12.1_06-3.9 is installed OR xen-tools-domU-4.12.1_06-3.9 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 15 is installed AND python-azure-agent-2.2.36-7.6 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed AND apache2-mod_wsgi-4.5.18-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Python2 packages 15 SP1 is installed AND Package Information python-curses-2.7.14-7.11 is installed OR python-gdbm-2.7.14-7.11 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 is installed AND Package Information ovmf-2017+git1510945757.b2662641d5-5.11 is installed OR ovmf-tools-2017+git1510945757.b2662641d5-5.11 is installed OR qemu-ovmf-x86_64-2017+git1510945757.b2662641d5-5.11 is installed OR qemu-uefi-aarch64-2017+git1510945757.b2662641d5-5.11 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information ntp-4.2.8p10-60 is installed OR ntp-doc-4.2.8p10-60 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information kernel-firmware-20170530-21.28 is installed OR ucode-amd-20170530-21.28 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information libwireshark9-2.4.9-48.29 is installed OR libwiretap7-2.4.9-48.29 is installed OR libwscodecs1-2.4.9-48.29 is installed OR libwsutil8-2.4.9-48.29 is installed OR wireshark-2.4.9-48.29 is installed OR wireshark-gtk-2.4.9-48.29 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND ucode-intel-20180703-13.25 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP3 is installed AND atftp-0.7.0-160.8 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed AND atftp-0.7.0-160.8 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information libpython3_4m1_0-3.4.6-24 is installed OR python3-base-3.4.6-24 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-BCL is installed AND Package Information bzip2-1.0.6-30.8 is installed OR bzip2-doc-1.0.6-30.8 is installed OR libbz2-1-1.0.6-30.8 is installed OR libbz2-1-32bit-1.0.6-30.8 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND gdb-8.3.1-2.14 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP3-ESPOS is installed AND gdb-8.3.1-2.14 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information MozillaFirefox-60.8.0-109.83 is installed OR MozillaFirefox-translations-common-60.8.0-109.83 is installed OR libfreebl3-3.44.1-58.28 is installed OR libfreebl3-32bit-3.44.1-58.28 is installed OR libfreebl3-hmac-3.44.1-58.28 is installed OR libfreebl3-hmac-32bit-3.44.1-58.28 is installed OR libsoftokn3-3.44.1-58.28 is installed OR libsoftokn3-32bit-3.44.1-58.28 is installed OR libsoftokn3-hmac-3.44.1-58.28 is installed OR libsoftokn3-hmac-32bit-3.44.1-58.28 is installed OR mozilla-nss-3.44.1-58.28 is installed OR mozilla-nss-32bit-3.44.1-58.28 is installed OR mozilla-nss-certs-3.44.1-58.28 is installed OR mozilla-nss-certs-32bit-3.44.1-58.28 is installed OR mozilla-nss-sysinit-3.44.1-58.28 is installed OR mozilla-nss-sysinit-32bit-3.44.1-58.28 is installed OR mozilla-nss-tools-3.44.1-58.28 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND libecpg6-10.5-1.3 is installed OR libpq5-10.5-1.3 is installed OR libpq5-32bit-10.5-1.3 is installed OR postgresql-init-10-17.20 is installed OR postgresql10-10.5-1.3 is installed OR postgresql10-contrib-10.5-1.3 is installed OR postgresql10-docs-10.5-1.3 is installed OR postgresql10-libs-10.5-1.3 is installed OR postgresql10-server-10.5-1.3 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP3-TERADATA is installed AND libecpg6-10.5-1.3 is installed OR libpq5-10.5-1.3 is installed OR libpq5-32bit-10.5-1.3 is installed OR postgresql-init-10-17.20 is installed OR postgresql10-10.5-1.3 is installed OR postgresql10-contrib-10.5-1.3 is installed OR postgresql10-docs-10.5-1.3 is installed OR postgresql10-libs-10.5-1.3 is installed OR postgresql10-server-10.5-1.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information libtirpc-1.0.1-17.6 is installed OR libtirpc-netconfig-1.0.1-17.6 is installed OR libtirpc3-1.0.1-17.6 is installed OR libtirpc3-32bit-1.0.1-17.6 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP4 is installed AND mailman-2.1.17-3.3 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed AND mailman-2.1.17-3.3 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP4-LTSS is installed AND tomcat-9.0.36-3.42 is installed OR tomcat-admin-webapps-9.0.36-3.42 is installed OR tomcat-docs-webapp-9.0.36-3.42 is installed OR tomcat-el-3_0-api-9.0.36-3.42 is installed OR tomcat-javadoc-9.0.36-3.42 is installed OR tomcat-jsp-2_3-api-9.0.36-3.42 is installed OR tomcat-lib-9.0.36-3.42 is installed OR tomcat-servlet-4_0-api-9.0.36-3.42 is installed OR tomcat-webapps-9.0.36-3.42 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP4-LTSS is installed AND tomcat-9.0.36-3.42 is installed OR tomcat-admin-webapps-9.0.36-3.42 is installed OR tomcat-docs-webapp-9.0.36-3.42 is installed OR tomcat-el-3_0-api-9.0.36-3.42 is installed OR tomcat-javadoc-9.0.36-3.42 is installed OR tomcat-jsp-2_3-api-9.0.36-3.42 is installed OR tomcat-lib-9.0.36-3.42 is installed OR tomcat-servlet-4_0-api-9.0.36-3.42 is installed OR tomcat-webapps-9.0.36-3.42 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP5 is installed AND apache2-mod_perl-2.0.8-13.5 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed AND apache2-mod_perl-2.0.8-13.5 is installed Definition Synopsis SUSE Linux Enterprise Server 15-LTSS is installed AND Package Information gstreamer-plugins-base-1.12.5-3.3 is installed OR gstreamer-plugins-base-lang-1.12.5-3.3 is installed OR libgstallocators-1_0-0-1.12.5-3.3 is installed OR libgstapp-1_0-0-1.12.5-3.3 is installed OR libgstaudio-1_0-0-1.12.5-3.3 is installed OR libgstfft-1_0-0-1.12.5-3.3 is installed OR libgstpbutils-1_0-0-1.12.5-3.3 is installed OR libgstriff-1_0-0-1.12.5-3.3 is installed OR libgstrtp-1_0-0-1.12.5-3.3 is installed OR libgstrtsp-1_0-0-1.12.5-3.3 is installed OR libgstsdp-1_0-0-1.12.5-3.3 is installed OR libgsttag-1_0-0-1.12.5-3.3 is installed OR libgstvideo-1_0-0-1.12.5-3.3 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND nginx-1.16.1-3.12 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND Package Information kernel-default-3.12.55-52.42 is installed OR kernel-default-extra-3.12.55-52.42 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND Package Information gd-2.1.0-12 is installed OR gd-32bit-2.1.0-12 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND Package Information ImageMagick-6.8.8.1-54 is installed OR libMagick++-6_Q16-3-6.8.8.1-54 is installed OR libMagickCore-6_Q16-1-32bit-6.8.8.1-54 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND Package Information gimp-2.8.18-9.3 is installed OR gimp-lang-2.8.18-9.3 is installed OR gimp-plugins-python-2.8.18-9.3 is installed OR libgimp-2_0-0-2.8.18-9.3 is installed OR libgimpui-2_0-0-2.8.18-9.3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information kernel-default-4.12.14-25.22 is installed OR kernel-default-extra-4.12.14-25.22 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND imobiledevice-tools-1.2.0+git20170122.45fda81-1 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND Package Information ardana-monasca-8.0+git.1535031421.9262a47-3.12 is installed OR ardana-spark-8.0+git.1534267176.a5f3a22-3.6 is installed OR kafka-0.10.2.2-5.6 is installed OR openstack-monasca-api-2.2.1~dev24-3.6 is installed OR python-monasca-api-2.2.1~dev24-3.6 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND Package Information ruby2.1-rubygem-sprockets-2_12-2.12.5-1.4 is installed OR rubygem-sprockets-2_12-2.12.5-1.4 is installed
BACK