Oval Definition:	oval:org.opensuse.security:def:46174
Revision Date: 2020-12-01 Version: 1 Title: Security update for polkit (Important) Description: This update for polkit fixes the following issues: Security issue fixed: - CVE-2019-6133: Fixed improper caching of auth decisions, which could bypass uid checking in the interactive backend (bsc#1121826). Family: unix Class: patch Status: Reference(s): 1013669 1019531 1021610 1023807 1023822 1023848 1027197 1029631 1035312 1100396 1110661 1121826 1122729 1127223 1127308 1128574 1131994 1135170 1150114 1154862 1160571 1168994 1170715 1172265 1172698 1172704 1173812 1174463 1174570 1176069 1176481 1177158 1177211 800255 809493 829110 856659 862374 873252 875220 884407 887108 887597 889192 891086 891277 893428 895387 895814 902232 902346 902349 903279 903640 904053 904177 904659 904969 905087 905100 906027 906140 906545 907069 907325 907536 907593 907714 907818 907969 907970 907971 907973 908057 908163 908198 908803 908825 908904 909077 909092 909095 909829 910249 910697 911181 911325 912129 912278 912281 912290 912514 912705 912946 913233 913387 913466 CVE-2009-5155 CVE-2014-3687 CVE-2014-3690 CVE-2014-8559 CVE-2014-9420 CVE-2014-9585 CVE-2016-10739 CVE-2016-9811 CVE-2017-5209 CVE-2017-5545 CVE-2017-5834 CVE-2017-5835 CVE-2017-5836 CVE-2017-6318 CVE-2017-6440 CVE-2017-7982 CVE-2017-9103 CVE-2017-9104 CVE-2017-9105 CVE-2017-9106 CVE-2017-9107 CVE-2017-9108 CVE-2017-9109 CVE-2019-16167 CVE-2019-17498 CVE-2019-5188 CVE-2019-5436 CVE-2019-6133 CVE-2019-9169 CVE-2020-10713 CVE-2020-14308 CVE-2020-14309 CVE-2020-14310 CVE-2020-14311 CVE-2020-14355 CVE-2020-14386 CVE-2020-15706 CVE-2020-15707 CVE-2020-26116 CVE-2020-8023 SUSE-SU-2017:0189-1 SUSE-SU-2017:0713-1 SUSE-SU-2017:1368-1 SUSE-SU-2019:1102-1 SUSE-SU-2019:2009-1 SUSE-SU-2019:2752-2 SUSE-SU-2020:1612-1 SUSE-SU-2020:2078-1 Platform(s): openSUSE Leap 15.0 openSUSE Leap 42.3 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Containers 15 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for High Performance Computing 15 SP1 SUSE Linux Enterprise Module for Legacy Software 15 SUSE Linux Enterprise Module for Legacy Software 15 SP1 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Web Scripting 15 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP3-ESPOS SUSE Linux Enterprise Server for SAP Applications 12 SP3-TERADATA SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP4-ESPOS SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND Package Information PackageKit-1.1.10-lp150.2 is installed OR PackageKit-backend-zypp-1.1.10-lp150.2 is installed OR PackageKit-gstreamer-plugin-1.1.10-lp150.2 is installed OR PackageKit-gtk3-module-1.1.10-lp150.2 is installed OR PackageKit-lang-1.1.10-lp150.2 is installed OR libpackagekit-glib2-18-1.1.10-lp150.2 is installed OR typelib-1_0-PackageKitGlib-1_0-1.1.10-lp150.2 is installed Definition Synopsis openSUSE Leap 42.3 is installed AND Package Information openssh-7.2p2-13 is installed OR openssh-helpers-7.2p2-13 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND postgresql-8.3.23-0.4 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information MozillaFirefox-31.5.3esr-0.8 is installed OR MozillaFirefox-translations-31.5.3esr-0.8 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND cabextract-1.2-2.12 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND facter-2.0.2-1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information cups-filters-1.0.58-8 is installed OR cups-filters-cups-browsed-1.0.58-8 is installed OR cups-filters-foomatic-rip-1.0.58-8 is installed OR cups-filters-ghostscript-1.0.58-8 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND busybox-1.21.1-3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information libXrender1-0.9.8-7 is installed OR libXrender1-32bit-0.9.8-7 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information ghostscript-9.25-23.13 is installed OR ghostscript-x11-9.25-23.13 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 is installed AND Package Information audit-devel-2.8.1-3 is installed OR libaudit1-2.8.1-3 is installed OR libaudit1-32bit-2.8.1-3 is installed OR libauparse0-2.8.1-3 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed AND Package Information apparmor-abstractions-2.12.2-7.17 is installed OR apparmor-docs-2.12.2-7.17 is installed OR apparmor-parser-2.12.2-7.17 is installed OR apparmor-parser-lang-2.12.2-7.17 is installed OR apparmor-profiles-2.12.2-7.17 is installed OR apparmor-utils-2.12.2-7.17 is installed OR apparmor-utils-lang-2.12.2-7.17 is installed OR pam_apparmor-2.12.2-7.17 is installed OR pam_apparmor-32bit-2.12.2-7.17 is installed OR perl-apparmor-2.12.2-7.17 is installed OR python3-apparmor-2.12.2-7.17 is installed Definition Synopsis SUSE Linux Enterprise Module for Containers 15 is installed AND Package Information containerd-1.2.5-5.13 is installed OR docker-18.09.6_ce-6.17 is installed OR docker-bash-completion-18.09.6_ce-6.17 is installed OR docker-libnetwork-0.7.0.1+gitr2726_872f0a83c98a-4.12 is installed OR docker-runc-1.0.0rc6+gitr3804_2b18fe1d885e-6.18 is installed OR golang-github-docker-libnetwork-0.7.0.1+gitr2726_872f0a83c98a-4.12 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 is installed AND libXcursor1-32bit-1.1.15-1 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed AND libICE6-32bit-1.0.9-1 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 SP2 is installed AND Package Information gvim-8.0.1568-5.6 is installed OR vim-8.0.1568-5.6 is installed Definition Synopsis SUSE Linux Enterprise Module for Development Tools 15 is installed AND Package Information git-2.16.3-1 is installed OR git-arch-2.16.3-1 is installed OR git-cvs-2.16.3-1 is installed OR git-daemon-2.16.3-1 is installed OR git-doc-2.16.3-1 is installed OR git-email-2.16.3-1 is installed OR git-gui-2.16.3-1 is installed OR git-svn-2.16.3-1 is installed OR git-web-2.16.3-1 is installed OR gitk-2.16.3-1 is installed Definition Synopsis SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed AND perl-doc-5.26.1-7.6 is installed Definition Synopsis SUSE Linux Enterprise Module for High Performance Computing 15 SP1 is installed AND Package Information libpmi0-18.08.9-3.10 is installed OR libslurm33-18.08.9-3.10 is installed OR perl-slurm-18.08.9-3.10 is installed OR slurm-18.08.9-3.10 is installed OR slurm-auth-none-18.08.9-3.10 is installed OR slurm-config-18.08.9-3.10 is installed OR slurm-config-man-18.08.9-3.10 is installed OR slurm-devel-18.08.9-3.10 is installed OR slurm-doc-18.08.9-3.10 is installed OR slurm-lua-18.08.9-3.10 is installed OR slurm-munge-18.08.9-3.10 is installed OR slurm-node-18.08.9-3.10 is installed OR slurm-pam_slurm-18.08.9-3.10 is installed OR slurm-plugins-18.08.9-3.10 is installed OR slurm-slurmdbd-18.08.9-3.10 is installed OR slurm-sql-18.08.9-3.10 is installed OR slurm-sview-18.08.9-3.10 is installed OR slurm-torque-18.08.9-3.10 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 is installed AND Package Information kernel-default-4.12.14-150.35 is installed OR reiserfs-kmp-default-4.12.14-150.35 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 SP1 is installed AND Package Information libncurses5-6.1-5.3 is installed OR libncurses5-32bit-6.1-5.3 is installed OR ncurses5-devel-6.1-5.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 is installed AND Package Information kernel-livepatch-4_12_14-25_3-default-9-2 is installed OR kernel-livepatch-SLE15_Update_1-9-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND Package Information kernel-livepatch-4_12_14-195-default-5-13 is installed OR kernel-livepatch-SLE15-SP1_Update_0-5-13 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 is installed AND Package Information ruby2.5-rubygem-activejob-doc-5_1-5.1.4-3.3 is installed OR rubygem-activejob-5_1-5.1.4-3.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed AND Package Information evince-3.26.0+20180128.1bd86963-4.7 is installed OR evince-plugin-comicsdocument-3.26.0+20180128.1bd86963-4.7 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed AND aws-cli-1.16.61-6 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 is installed AND Package Information rmt-server-2.5.2-3.26 is installed OR rmt-server-config-2.5.2-3.26 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed AND Package Information subversion-1.10.6-3.6 is installed OR subversion-server-1.10.6-3.6 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 is installed AND xalan-j2-2.7.2-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information curl-7.37.0-15 is installed OR libcurl4-7.37.0-15 is installed OR libcurl4-32bit-7.37.0-15 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information kernel-default-4.4.121-92.114 is installed OR kernel-default-base-4.4.121-92.114 is installed OR kernel-default-devel-4.4.121-92.114 is installed OR kernel-devel-4.4.121-92.114 is installed OR kernel-macros-4.4.121-92.114 is installed OR kernel-source-4.4.121-92.114 is installed OR kernel-syms-4.4.121-92.114 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information libmysqlclient18-10.0.38-29.27 is installed OR libmysqlclient18-32bit-10.0.38-29.27 is installed OR mariadb-10.0.38-29.27 is installed OR mariadb-client-10.0.38-29.27 is installed OR mariadb-errormessages-10.0.38-29.27 is installed OR mariadb-tools-10.0.38-29.27 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP3 is installed AND MozillaFirefox-60.7.2-109.80 is installed OR MozillaFirefox-translations-common-60.7.2-109.80 is installed OR Package Information SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND MozillaFirefox-60.7.2-109.80 is installed OR MozillaFirefox-translations-common-60.7.2-109.80 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information groff-1.22.2-5 is installed OR groff-full-1.22.2-5 is installed OR gxditview-1.22.2-5 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND libpolkit0-0.113-5.18 is installed OR polkit-0.113-5.18 is installed OR typelib-1_0-Polkit-1_0-0.113-5.18 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP3-ESPOS is installed AND libpolkit0-0.113-5.18 is installed OR polkit-0.113-5.18 is installed OR typelib-1_0-Polkit-1_0-0.113-5.18 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND Package Information libpolkit0-0.113-5.18 is installed OR polkit-0.113-5.18 is installed OR typelib-1_0-Polkit-1_0-0.113-5.18 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information ghostscript-9.27-23.28 is installed OR ghostscript-x11-9.27-23.28 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND libldap-2_4-2-2.4.41-18.71 is installed OR libldap-2_4-2-32bit-2.4.41-18.71 is installed OR openldap2-2.4.41-18.71 is installed OR openldap2-back-meta-2.4.41-18.71 is installed OR openldap2-client-2.4.41-18.71 is installed OR openldap2-doc-2.4.41-18.71 is installed OR openldap2-ppolicy-check-password-1.2-18.71 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP3-TERADATA is installed AND libldap-2_4-2-2.4.41-18.71 is installed OR libldap-2_4-2-32bit-2.4.41-18.71 is installed OR openldap2-2.4.41-18.71 is installed OR openldap2-back-meta-2.4.41-18.71 is installed OR openldap2-client-2.4.41-18.71 is installed OR openldap2-doc-2.4.41-18.71 is installed OR openldap2-ppolicy-check-password-1.2-18.71 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information apache2-2.4.23-29.21 is installed OR apache2-doc-2.4.23-29.21 is installed OR apache2-example-pages-2.4.23-29.21 is installed OR apache2-prefork-2.4.23-29.21 is installed OR apache2-utils-2.4.23-29.21 is installed OR apache2-worker-2.4.23-29.21 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP4 is installed AND glibc-2.22-100.8 is installed OR glibc-32bit-2.22-100.8 is installed OR glibc-devel-2.22-100.8 is installed OR glibc-devel-32bit-2.22-100.8 is installed OR glibc-html-2.22-100.8 is installed OR glibc-i18ndata-2.22-100.8 is installed OR glibc-info-2.22-100.8 is installed OR glibc-locale-2.22-100.8 is installed OR glibc-locale-32bit-2.22-100.8 is installed OR glibc-profile-2.22-100.8 is installed OR glibc-profile-32bit-2.22-100.8 is installed OR nscd-2.22-100.8 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed AND glibc-2.22-100.8 is installed OR glibc-32bit-2.22-100.8 is installed OR glibc-devel-2.22-100.8 is installed OR glibc-devel-32bit-2.22-100.8 is installed OR glibc-html-2.22-100.8 is installed OR glibc-i18ndata-2.22-100.8 is installed OR glibc-info-2.22-100.8 is installed OR glibc-locale-2.22-100.8 is installed OR glibc-locale-32bit-2.22-100.8 is installed OR glibc-profile-2.22-100.8 is installed OR glibc-profile-32bit-2.22-100.8 is installed OR nscd-2.22-100.8 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information libjavascriptcoregtk-4_0-18-2.20.3-2.23 is installed OR libwebkit2gtk-4_0-37-2.20.3-2.23 is installed OR typelib-1_0-JavaScriptCore-4_0-2.20.3-2.23 is installed OR typelib-1_0-WebKit2-4_0-2.20.3-2.23 is installed OR webkit2gtk-4_0-injected-bundles-2.20.3-2.23 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP4-ESPOS is installed AND libspice-client-glib-2_0-8-0.33-3.9 is installed OR libspice-client-glib-helper-0.33-3.9 is installed OR libspice-client-gtk-3_0-5-0.33-3.9 is installed OR libspice-controller0-0.33-3.9 is installed OR spice-gtk-0.33-3.9 is installed OR typelib-1_0-SpiceClientGlib-2_0-0.33-3.9 is installed OR typelib-1_0-SpiceClientGtk-3_0-0.33-3.9 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP4-ESPOS is installed AND libspice-client-glib-2_0-8-0.33-3.9 is installed OR libspice-client-glib-helper-0.33-3.9 is installed OR libspice-client-gtk-3_0-5-0.33-3.9 is installed OR libspice-controller0-0.33-3.9 is installed OR spice-gtk-0.33-3.9 is installed OR typelib-1_0-SpiceClientGlib-2_0-0.33-3.9 is installed OR typelib-1_0-SpiceClientGtk-3_0-0.33-3.9 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP5 is installed AND sysstat-12.0.2-10.27 is installed OR sysstat-isag-12.0.2-10.27 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed AND sysstat-12.0.2-10.27 is installed OR sysstat-isag-12.0.2-10.27 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information cups-2.2.7-3.17 is installed OR cups-client-2.2.7-3.17 is installed OR cups-config-2.2.7-3.17 is installed OR cups-ddk-2.2.7-3.17 is installed OR cups-devel-2.2.7-3.17 is installed OR libcups2-2.2.7-3.17 is installed OR libcups2-32bit-2.2.7-3.17 is installed OR libcupscgi1-2.2.7-3.17 is installed OR libcupsimage2-2.2.7-3.17 is installed OR libcupsmime1-2.2.7-3.17 is installed OR libcupsppdc1-2.2.7-3.17 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND Package Information kernel-default-3.12.36-38 is installed OR kernel-default-extra-3.12.36-38 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND Package Information sane-backends-1.0.24-3 is installed OR sane-backends-32bit-1.0.24-3 is installed OR sane-backends-autoconfig-1.0.24-3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND Package Information libcares2-1.9.1-8 is installed OR libcares2-32bit-1.9.1-8 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND Package Information gd-2.1.0-24.6 is installed OR gd-32bit-2.1.0-24.6 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND Package Information bluez-5.13-5.7 is installed OR bluez-cups-5.13-5.7 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP5 is installed AND Package Information libmysqlclient_r18-10.0.40.4-2.20 is installed OR libmysqlclient_r18-32bit-10.0.40.4-2.20 is installed OR mariadb-100-10.0.40.4-2.20 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information LibVNCServer-0.9.10-4.3 is installed OR libvncclient0-0.9.10-4.3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND libstaroffice-0_0-0-0.0.6-5 is installed Definition Synopsis SUSE OpenStack Cloud 6 is installed AND Package Information libopenssl1_0_0-1.0.1i-54.11 is installed OR libopenssl1_0_0-32bit-1.0.1i-54.11 is installed OR libopenssl1_0_0-hmac-1.0.1i-54.11 is installed OR libopenssl1_0_0-hmac-32bit-1.0.1i-54.11 is installed OR openssl-1.0.1i-54.11 is installed OR openssl-doc-1.0.1i-54.11 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND python-Werkzeug-0.12.2-3.3 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND Package Information ruby2.1-rubygem-loofah-2.0.2-3.8 is installed OR rubygem-loofah-2.0.2-3.8 is installed
BACK