Oval Definition:	oval:org.opensuse.security:def:46063
Revision Date: 2020-12-01 Version: 1 Title: Security update for xrdp (Important) Description: This update for xrdp fixes the following issues: - Security fixes (bsc#1173580, CVE-2020-4044): + Add patches: * xrdp-cve-2020-4044-fix-0.patch * xrdp-cve-2020-4044-fix-1.patch + Rebase SLE patch: * xrdp-fate318398-change-expired-password.patch - Update patch: + xrdp-Allow-sessions-with-32-bpp.patch.patch Family: unix Class: patch Status: Reference(s): 1082821 1091396 1105010 1123823 1123828 1123832 1138529 1152497 1152856 1154212 1154448 1154456 1154458 1154460 1154461 1154464 1155199 1155945 1157888 1158003 1158004 1158005 1158006 1158007 1170643 1170715 1171550 1172524 1172698 1172704 1172745 1173580 1174421 1177943 718113 758040 856382 856729 886785 898159 902606 907973 908950 912183 914818 916543 920016 922071 924722 924919 929092 929871 930813 932285 932350 934430 934942 934962 935087 936556 936773 937261 937609 937612 937613 937616 938550 938706 938891 938892 938893 939145 939266 939716 939834 939994 939998 940398 940545 940679 940776 940912 940925 940965 941098 941305 941908 941951 942160 942204 942307 942367 943959 945443 945445 945649 948536 949440 951155 951199 951392 951615 951638 952579 952976 955832 956708 956801 956876 957395 957546 957988 957990 958463 958504 958510 958647 958886 958951 959190 959364 959399 959436 959705 960300 964336 965294 965296 967014 967015 977784 CVE-2015-5156 CVE-2015-5157 CVE-2015-5283 CVE-2015-5697 CVE-2015-6252 CVE-2015-6937 CVE-2015-7550 CVE-2015-7613 CVE-2015-8539 CVE-2015-8543 CVE-2015-8550 CVE-2015-8551 CVE-2015-8552 CVE-2015-8569 CVE-2015-8575 CVE-2016-0794 CVE-2016-0795 CVE-2017-18199 CVE-2017-6318 CVE-2018-12207 CVE-2018-15473 CVE-2018-20748 CVE-2018-20749 CVE-2018-20750 CVE-2019-11135 CVE-2019-14866 CVE-2019-18420 CVE-2019-18421 CVE-2019-18422 CVE-2019-18423 CVE-2019-18424 CVE-2019-18425 CVE-2019-19577 CVE-2019-19578 CVE-2019-19579 CVE-2019-19580 CVE-2019-19581 CVE-2019-19582 CVE-2019-19583 CVE-2019-2894 CVE-2019-2933 CVE-2019-2945 CVE-2019-2949 CVE-2019-2958 CVE-2019-2962 CVE-2019-2964 CVE-2019-2973 CVE-2019-2975 CVE-2019-2978 CVE-2019-2981 CVE-2019-2983 CVE-2019-2987 CVE-2019-2988 CVE-2019-2989 CVE-2019-2992 CVE-2019-2999 CVE-2020-12861 CVE-2020-12862 CVE-2020-12863 CVE-2020-12864 CVE-2020-12865 CVE-2020-12866 CVE-2020-12867 CVE-2020-14779 CVE-2020-14781 CVE-2020-14782 CVE-2020-14792 CVE-2020-14796 CVE-2020-14797 CVE-2020-14798 CVE-2020-14803 CVE-2020-15705 CVE-2020-2752 CVE-2020-2812 CVE-2020-3899 CVE-2020-4044 CVE-2020-8023 SUSE-SU-2015:1727-1 SUSE-SU-2016:0168-1 SUSE-SU-2016:1728-1 SUSE-SU-2018:3910-1 SUSE-SU-2019:0313-1 SUSE-SU-2019:3064-1 SUSE-SU-2020:1859-1 SUSE-SU-2020:1991-1 SUSE-SU-2020:3023-1 SUSE-SU-2020:3125-1 Platform(s): openSUSE Leap 15.0 openSUSE Leap 42.3 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for High Performance Computing 15 SP1 SUSE Linux Enterprise Module for Legacy Software 15 SP1 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 SUSE Linux Enterprise Module for Python2 packages 15 SP1 SUSE Linux Enterprise Module for Realtime packages 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP3-BCL SUSE Linux Enterprise Server for SAP Applications 12 SP3-TERADATA SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP4-ESPOS SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND Package Information bzip2-1.0.6-lp150.3 is installed OR libbz2-1-1.0.6-lp150.3 is installed OR libbz2-1-32bit-1.0.6-lp150.3 is installed Definition Synopsis openSUSE Leap 42.3 is installed AND Package Information libkpathsea6-6.2.2-31 is installed OR texlive-latex-doc-2016.122.svn40218-25 is installed OR texlive-lm-fonts-2016.122.2.004svn28119-23 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information hplip-3.11.10-0.6.11 is installed OR hplip-hpijs-3.11.10-0.6.11 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND LibVNCServer-0.9.1-156 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information gpg2-2.0.9-25.33.41 is installed OR gpg2-lang-2.0.9-25.33.41 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information cron-4.2-55 is installed OR cronie-1.4.11-55 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND libdmx1-1.1.3-3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information e2fsprogs-1.42.11-7 is installed OR libcom_err2-1.42.11-7 is installed OR libcom_err2-32bit-1.42.11-7 is installed OR libext2fs2-1.42.11-7 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND autofs-5.0.9-27 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information cpp48-4.8.5-31.17 is installed OR gcc48-4.8.5-31.17 is installed OR gcc48-32bit-4.8.5-31.17 is installed OR gcc48-c++-4.8.5-31.17 is installed OR gcc48-gij-4.8.5-31.17 is installed OR gcc48-gij-32bit-4.8.5-31.17 is installed OR gcc48-info-4.8.5-31.17 is installed OR libasan0-4.8.5-31.17 is installed OR libasan0-32bit-4.8.5-31.17 is installed OR libgcj48-4.8.5-31.17 is installed OR libgcj48-32bit-4.8.5-31.17 is installed OR libgcj48-jar-4.8.5-31.17 is installed OR libgcj_bc1-4.8.5-31.17 is installed OR libstdc++48-devel-4.8.5-31.17 is installed OR libstdc++48-devel-32bit-4.8.5-31.17 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 is installed AND Package Information glib2-devel-2.54.3-2 is installed OR glib2-lang-2.54.3-2 is installed OR glib2-tools-2.54.3-2 is installed OR libgio-2_0-0-2.54.3-2 is installed OR libgio-2_0-0-32bit-2.54.3-2 is installed OR libglib-2_0-0-2.54.3-2 is installed OR libglib-2_0-0-32bit-2.54.3-2 is installed OR libgmodule-2_0-0-2.54.3-2 is installed OR libgmodule-2_0-0-32bit-2.54.3-2 is installed OR libgobject-2_0-0-2.54.3-2 is installed OR libgobject-2_0-0-32bit-2.54.3-2 is installed OR libgthread-2_0-0-2.54.3-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed AND Package Information clamav-0.100.3-3.9 is installed OR clamav-devel-0.100.3-3.9 is installed OR libclamav7-0.100.3-3.9 is installed OR libclammspack0-0.100.3-3.9 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 is installed AND libICE6-32bit-1.0.9-1 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed AND Package Information evince-3.26.0+20180128.1bd86963-2 is installed OR evince-devel-3.26.0+20180128.1bd86963-2 is installed OR evince-lang-3.26.0+20180128.1bd86963-2 is installed OR evince-plugin-djvudocument-3.26.0+20180128.1bd86963-2 is installed OR evince-plugin-dvidocument-3.26.0+20180128.1bd86963-2 is installed OR evince-plugin-pdfdocument-3.26.0+20180128.1bd86963-2 is installed OR evince-plugin-psdocument-3.26.0+20180128.1bd86963-2 is installed OR evince-plugin-tiffdocument-3.26.0+20180128.1bd86963-2 is installed OR evince-plugin-xpsdocument-3.26.0+20180128.1bd86963-2 is installed OR libevdocument3-4-3.26.0+20180128.1bd86963-2 is installed OR libevview3-3-3.26.0+20180128.1bd86963-2 is installed OR nautilus-evince-3.26.0+20180128.1bd86963-2 is installed OR typelib-1_0-EvinceDocument-3_0-3.26.0+20180128.1bd86963-2 is installed OR typelib-1_0-EvinceView-3_0-3.26.0+20180128.1bd86963-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Development Tools 15 is installed AND Package Information build-20180329-1 is installed OR build-mkbaselibs-20180329-1 is installed Definition Synopsis SUSE Linux Enterprise Module for High Performance Computing 15 SP1 is installed AND Package Information libpmi0-18.08.8-3.4 is installed OR libslurm33-18.08.8-3.4 is installed OR perl-Switch-2.17-3.2 is installed OR perl-slurm-18.08.8-3.4 is installed OR slurm-18.08.8-3.4 is installed OR slurm-auth-none-18.08.8-3.4 is installed OR slurm-config-18.08.8-3.4 is installed OR slurm-config-man-18.08.8-3.4 is installed OR slurm-devel-18.08.8-3.4 is installed OR slurm-doc-18.08.8-3.4 is installed OR slurm-lua-18.08.8-3.4 is installed OR slurm-munge-18.08.8-3.4 is installed OR slurm-node-18.08.8-3.4 is installed OR slurm-pam_slurm-18.08.8-3.4 is installed OR slurm-plugins-18.08.8-3.4 is installed OR slurm-slurmdbd-18.08.8-3.4 is installed OR slurm-sql-18.08.8-3.4 is installed OR slurm-sview-18.08.8-3.4 is installed OR slurm-torque-18.08.8-3.4 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 SP1 is installed AND Package Information kernel-default-4.12.14-197.29 is installed OR reiserfs-kmp-default-4.12.14-197.29 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 is installed AND Package Information kernel-livepatch-4_12_14-25_25-default-4-2 is installed OR kernel-livepatch-SLE15_Update_7-4-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 is installed AND tiff-4.0.9-5.17 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed AND Package Information gnutls-3.6.7-6.29 is installed OR gnutls-guile-3.6.7-6.29 is installed OR libgnutls-devel-32bit-3.6.7-6.29 is installed Definition Synopsis SUSE Linux Enterprise Module for Python2 packages 15 SP1 is installed AND Package Information python-2.7.14-7.14 is installed OR python-base-2.7.14-7.14 is installed OR python-curses-2.7.14-7.14 is installed OR python-devel-2.7.14-7.14 is installed OR python-gdbm-2.7.14-7.14 is installed OR python-xml-2.7.14-7.14 is installed Definition Synopsis SUSE Linux Enterprise Module for Realtime packages 15 SP1 is installed AND Package Information cluster-md-kmp-rt-4.12.14-14.20 is installed OR dlm-kmp-rt-4.12.14-14.20 is installed OR gfs2-kmp-rt-4.12.14-14.20 is installed OR kernel-devel-rt-4.12.14-14.20 is installed OR kernel-rt-4.12.14-14.20 is installed OR kernel-rt-base-4.12.14-14.20 is installed OR kernel-rt-devel-4.12.14-14.20 is installed OR kernel-rt_debug-4.12.14-14.20 is installed OR kernel-rt_debug-devel-4.12.14-14.20 is installed OR kernel-source-rt-4.12.14-14.20 is installed OR kernel-syms-rt-4.12.14-14.20 is installed OR ocfs2-kmp-rt-4.12.14-14.20 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 is installed AND Package Information bind-9.11.2-10 is installed OR bind-chrootenv-9.11.2-10 is installed OR bind-doc-9.11.2-10 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed AND Package Information libxmltooling-devel-1.6.4-3.3 is installed OR libxmltooling7-1.6.4-3.3 is installed OR xmltooling-schemas-1.6.4-3.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information bash-4.2-75 is installed OR bash-doc-4.2-75 is installed OR libreadline6-6.2-75 is installed OR libreadline6-32bit-6.2-75 is installed OR readline-doc-6.2-75 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information java-1_8_0-openjdk-1.8.0.212-27.32 is installed OR java-1_8_0-openjdk-demo-1.8.0.212-27.32 is installed OR java-1_8_0-openjdk-devel-1.8.0.212-27.32 is installed OR java-1_8_0-openjdk-headless-1.8.0.212-27.32 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information apache2-2.4.23-29.27 is installed OR apache2-doc-2.4.23-29.27 is installed OR apache2-example-pages-2.4.23-29.27 is installed OR apache2-prefork-2.4.23-29.27 is installed OR apache2-utils-2.4.23-29.27 is installed OR apache2-worker-2.4.23-29.27 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information curl-7.37.0-37.37 is installed OR libcurl4-7.37.0-37.37 is installed OR libcurl4-32bit-7.37.0-37.37 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information cron-4.2-58 is installed OR cronie-1.4.11-58 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP3-BCL is installed AND xrdp-0.9.0~git.1456906198.f422461-21.27 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP3-BCL is installed AND xrdp-0.9.0~git.1456906198.f422461-21.27 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND sudo-1.8.20p2-3.14 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND xen-4.9.4_06-3.59 is installed OR xen-doc-html-4.9.4_06-3.59 is installed OR xen-libs-4.9.4_06-3.59 is installed OR xen-libs-32bit-4.9.4_06-3.59 is installed OR xen-tools-4.9.4_06-3.59 is installed OR xen-tools-domU-4.9.4_06-3.59 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP3-TERADATA is installed AND xen-4.9.4_06-3.59 is installed OR xen-doc-html-4.9.4_06-3.59 is installed OR xen-libs-4.9.4_06-3.59 is installed OR xen-libs-32bit-4.9.4_06-3.59 is installed OR xen-tools-4.9.4_06-3.59 is installed OR xen-tools-domU-4.9.4_06-3.59 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information libsoup-2.62.2-5.7 is installed OR libsoup-2_4-1-2.62.2-5.7 is installed OR libsoup-2_4-1-32bit-2.62.2-5.7 is installed OR libsoup-lang-2.62.2-5.7 is installed OR typelib-1_0-Soup-2_4-2.62.2-5.7 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP4 is installed AND openssh-7.2p2-74.30 is installed OR openssh-askpass-gnome-7.2p2-74.30 is installed OR openssh-fips-7.2p2-74.30 is installed OR openssh-helpers-7.2p2-74.30 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed AND openssh-7.2p2-74.30 is installed OR openssh-askpass-gnome-7.2p2-74.30 is installed OR openssh-fips-7.2p2-74.30 is installed OR openssh-helpers-7.2p2-74.30 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information gdk-pixbuf-lang-2.34.0-19.17 is installed OR gdk-pixbuf-query-loaders-2.34.0-19.17 is installed OR gdk-pixbuf-query-loaders-32bit-2.34.0-19.17 is installed OR libgdk_pixbuf-2_0-0-2.34.0-19.17 is installed OR libgdk_pixbuf-2_0-0-32bit-2.34.0-19.17 is installed OR typelib-1_0-GdkPixbuf-2_0-2.34.0-19.17 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP4-ESPOS is installed AND grub2-2.02-12.39 is installed OR grub2-arm64-efi-2.02-12.39 is installed OR grub2-i386-pc-2.02-12.39 is installed OR grub2-snapper-plugin-2.02-12.39 is installed OR grub2-systemd-sleep-plugin-2.02-12.39 is installed OR grub2-x86_64-efi-2.02-12.39 is installed OR grub2-x86_64-xen-2.02-12.39 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP4-ESPOS is installed AND grub2-2.02-12.39 is installed OR grub2-arm64-efi-2.02-12.39 is installed OR grub2-i386-pc-2.02-12.39 is installed OR grub2-snapper-plugin-2.02-12.39 is installed OR grub2-systemd-sleep-plugin-2.02-12.39 is installed OR grub2-x86_64-efi-2.02-12.39 is installed OR grub2-x86_64-xen-2.02-12.39 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP5 is installed AND cpio-2.11-36.6 is installed OR cpio-lang-2.11-36.6 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed AND cpio-2.11-36.6 is installed OR cpio-lang-2.11-36.6 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information libjavascriptcoregtk-4_0-18-2.28.1-3.49 is installed OR libwebkit2gtk-4_0-37-2.28.1-3.49 is installed OR libwebkit2gtk3-lang-2.28.1-3.49 is installed OR webkit2gtk-4_0-injected-bundles-2.28.1-3.49 is installed OR webkit2gtk3-2.28.1-3.49 is installed OR webkit2gtk3-devel-2.28.1-3.49 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND Package Information kernel-default-3.12.48-52.27 is installed OR kernel-default-extra-3.12.48-52.27 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND Package Information freerdp-2.0.0~git.1463131968.4e66df7-12.3 is installed OR libfreerdp2-2.0.0~git.1463131968.4e66df7-12.3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND Package Information bluez-5.13-5.4 is installed OR bluez-cups-5.13-5.4 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND Package Information bluez-5.13-5.12 is installed OR bluez-cups-5.13-5.12 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP5 is installed AND Package Information openconnect-7.08-3.4 is installed OR openconnect-lang-7.08-3.4 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information kernel-default-4.12.14-150.35 is installed OR kernel-default-extra-4.12.14-150.35 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND imobiledevice-tools-1.2.0+git20170122.45fda81-1 is installed Definition Synopsis SUSE OpenStack Cloud 6 is installed AND python-pymongo-3.0.3-1 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND Package Information libecpg6-10.9-1.12 is installed OR libpq5-10.9-1.12 is installed OR libpq5-32bit-10.9-1.12 is installed OR postgresql10-10.9-1.12 is installed OR postgresql10-contrib-10.9-1.12 is installed OR postgresql10-docs-10.9-1.12 is installed OR postgresql10-libs-10.9-1.12 is installed OR postgresql10-plperl-10.9-1.12 is installed OR postgresql10-plpython-10.9-1.12 is installed OR postgresql10-pltcl-10.9-1.12 is installed OR postgresql10-server-10.9-1.12 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND couchdb-1.7.2-3.3 is installed
BACK