Oval Definition:	oval:org.opensuse.security:def:4813
Revision Date: 2020-12-02 Version: 1 Title: Security update for ovmf (Important) Description: This update for ovmf fixes the following issues: Security issues fixed: - CVE-2018-12180: Fixed a buffer overflow in BlockIo service, which could lead to memory read/write overrun (bsc#1127820). - CVE-2018-12178: Fixed an improper DNS check upon receiving a new DNS packet (bsc#1127821). - CVE-2018-3630: Fixed a logic error in FV parsing which could allow a local attacker to bypass the chain of trust checks (bsc#1127822). Family: unix Class: patch Status: Reference(s): 1125330 1127820 1127821 1127822 1129821 1130262 1133534 1138301 1138302 1138303 1138305 1141861 1141862 1146098 1146105 1146107 1148643 1149943 1149944 1157465 1159284 1159670 1162327 1162629 1162632 1163985 1165280 1165289 1165572 1167437 1168340 1168630 1168874 1169604 1169800 1170104 1170288 1170595 1171906 1171924 1172075 1173072 1173477 1173691 1173694 1173700 1173701 1173743 1173874 1173875 1173876 1173880 1174157 1174165 1174922 1174923 1175259 1175987 1176024 1176294 1176397 1177867 1178319 1178361 1178362 1178485 CVE-2009-0946 CVE-2010-0405 CVE-2010-2497 CVE-2010-2640 CVE-2010-2641 CVE-2010-2642 CVE-2010-2643 CVE-2010-2805 CVE-2010-3053 CVE-2010-3054 CVE-2010-3311 CVE-2010-3814 CVE-2011-0226 CVE-2011-2721 CVE-2011-3627 CVE-2012-1457 CVE-2012-1458 CVE-2012-1459 CVE-2012-5668 CVE-2012-5669 CVE-2012-5670 CVE-2017-18922 CVE-2018-12178 CVE-2018-12180 CVE-2018-18335 CVE-2018-18356 CVE-2018-18506 CVE-2018-18509 CVE-2018-21247 CVE-2018-3630 CVE-2019-10161 CVE-2019-10166 CVE-2019-10167 CVE-2019-10168 CVE-2019-17639 CVE-2019-18897 CVE-2019-20839 CVE-2019-20840 CVE-2019-5785 CVE-2019-9788 CVE-2019-9790 CVE-2019-9791 CVE-2019-9792 CVE-2019-9793 CVE-2019-9794 CVE-2019-9795 CVE-2019-9796 CVE-2019-9801 CVE-2019-9810 CVE-2019-9813 CVE-2019-9848 CVE-2019-9849 CVE-2019-9850 CVE-2019-9851 CVE-2019-9852 CVE-2019-9854 CVE-2019-9855 CVE-2020-11651 CVE-2020-11652 CVE-2020-12673 CVE-2020-12674 CVE-2020-14397 CVE-2020-14398 CVE-2020-14399 CVE-2020-14400 CVE-2020-14401 CVE-2020-14402 CVE-2020-14556 CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581 CVE-2020-14583 CVE-2020-14593 CVE-2020-14621 CVE-2020-16846 CVE-2020-1720 CVE-2020-17490 CVE-2020-25592 CVE-2020-6819 CVE-2020-6820 CVE-2020-6821 CVE-2020-6822 CVE-2020-6825 CVE-2020-7059 CVE-2020-7060 CVE-2020-7062 CVE-2020-7063 SUSE-SU-2019:0580-1 SUSE-SU-2019:0853-1 SUSE-SU-2019:1643-1 SUSE-SU-2019:2402-1 SUSE-SU-2020:0622-1 SUSE-SU-2020:1027-1 SUSE-SU-2020:1922-1 SUSE-SU-2020:1973-1 SUSE-SU-2020:2149-1 SUSE-SU-2020:2266-1 SUSE-SU-2020:2453-1 SUSE-SU-2020:3244-1 Platform(s): SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise High Availability 12 SUSE Linux Enterprise High Availability 12 SP1 SUSE Linux Enterprise High Availability 12 SP2 SUSE Linux Enterprise High Availability 12 SP3 SUSE Linux Enterprise High Availability 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Live Patching 12 SUSE Linux Enterprise Module for Legacy Software 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Web Scripting 12 SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE OpenStack Cloud 5 Product(s): Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information MozillaFirefox-10.0.9-0.3.1 is installed OR MozillaFirefox-branding-SLED-7-0.6.7.85 is installed OR MozillaFirefox-translations-10.0.9-0.3.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND clamav-0.98.4-1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information MozillaFirefox-38.4.0esr-51 is installed OR MozillaFirefox-translations-38.4.0esr-51 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND coolkey-1.1.0-147 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information gpg2-2.0.24-8 is installed OR gpg2-lang-2.0.24-8 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information aaa_base-13.2+git20140911.61c1681-38.8 is installed OR aaa_base-extras-13.2+git20140911.61c1681-38.8 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 is installed AND Package Information conntrack-tools-1.4.2-5.2 is installed OR libnetfilter_cthelper-1.0.0-7.1 is installed OR libnetfilter_cthelper0-1.0.0-7.1 is installed OR libnetfilter_cttimeout-1.0.0-9.1 is installed OR libnetfilter_cttimeout1-1.0.0-9.1 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP1 is installed AND Package Information ctdb-4.2.4-28.24.1 is installed OR samba-4.2.4-28.24.1 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP2 is installed AND conntrack-tools-1.4.2-5 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP3 is installed AND Package Information libpacemaker3-1.1.16-4 is installed OR pacemaker-1.1.16-4 is installed OR pacemaker-cli-1.1.16-4 is installed OR pacemaker-cts-1.1.16-4 is installed OR pacemaker-remote-1.1.16-4 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP4 is installed AND Package Information corosync-2.3.6-9.13 is installed OR libcorosync4-2.3.6-9.13 is installed Definition Synopsis SUSE Linux Enterprise High Performance Computing 12 SP5 is installed AND ant-1.9.4-3.3 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 is installed AND Package Information kgraft-patch-3_12_44-52_10-default-1-2.1 is installed OR kgraft-patch-3_12_44-52_10-xen-1-2.1 is installed OR kgraft-patch-SLE12_Update_6-1-2.1 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 is installed AND Package Information ovmf-2017+git1510945757.b2662641d5-5.14 is installed OR ovmf-tools-2017+git1510945757.b2662641d5-5.14 is installed OR qemu-ovmf-x86_64-2017+git1510945757.b2662641d5-5.14 is installed OR qemu-uefi-aarch64-2017+git1510945757.b2662641d5-5.14 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed AND Package Information libvirt-5.1.0-8.6 is installed OR libvirt-admin-5.1.0-8.6 is installed OR libvirt-bash-completion-5.1.0-8.6 is installed OR libvirt-client-5.1.0-8.6 is installed OR libvirt-daemon-5.1.0-8.6 is installed OR libvirt-daemon-config-network-5.1.0-8.6 is installed OR libvirt-daemon-config-nwfilter-5.1.0-8.6 is installed OR libvirt-daemon-driver-interface-5.1.0-8.6 is installed OR libvirt-daemon-driver-libxl-5.1.0-8.6 is installed OR libvirt-daemon-driver-lxc-5.1.0-8.6 is installed OR libvirt-daemon-driver-network-5.1.0-8.6 is installed OR libvirt-daemon-driver-nodedev-5.1.0-8.6 is installed OR libvirt-daemon-driver-nwfilter-5.1.0-8.6 is installed OR libvirt-daemon-driver-qemu-5.1.0-8.6 is installed OR libvirt-daemon-driver-secret-5.1.0-8.6 is installed OR libvirt-daemon-driver-storage-5.1.0-8.6 is installed OR libvirt-daemon-driver-storage-core-5.1.0-8.6 is installed OR libvirt-daemon-driver-storage-disk-5.1.0-8.6 is installed OR libvirt-daemon-driver-storage-iscsi-5.1.0-8.6 is installed OR libvirt-daemon-driver-storage-logical-5.1.0-8.6 is installed OR libvirt-daemon-driver-storage-mpath-5.1.0-8.6 is installed OR libvirt-daemon-driver-storage-rbd-5.1.0-8.6 is installed OR libvirt-daemon-driver-storage-scsi-5.1.0-8.6 is installed OR libvirt-daemon-hooks-5.1.0-8.6 is installed OR libvirt-daemon-lxc-5.1.0-8.6 is installed OR libvirt-daemon-qemu-5.1.0-8.6 is installed OR libvirt-daemon-xen-5.1.0-8.6 is installed OR libvirt-devel-5.1.0-8.6 is installed OR libvirt-doc-5.1.0-8.6 is installed OR libvirt-lock-sanlock-5.1.0-8.6 is installed OR libvirt-nss-5.1.0-8.6 is installed Definition Synopsis SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT is installed AND Package Information openssh-7.2p2-74.42 is installed OR openssh-askpass-gnome-7.2p2-74.42 is installed OR openssh-fips-7.2p2-74.42 is installed OR openssh-helpers-7.2p2-74.42 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2 is installed AND Package Information gnome-screensaver-2.28.3-0.28.1 is installed OR gnome-screensaver-lang-2.28.3-0.28.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP3 is installed AND evolution-data-server-2.28.2-0.32.1 is installed OR evolution-data-server-32bit-2.28.2-0.32.1 is installed OR evolution-data-server-lang-2.28.2-0.32.1 is installed OR evolution-data-server-x86-2.28.2-0.32.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP3 is installed AND evolution-data-server-2.28.2-0.32.1 is installed OR evolution-data-server-32bit-2.28.2-0.32.1 is installed OR evolution-data-server-lang-2.28.2-0.32.1 is installed OR evolution-data-server-x86-2.28.2-0.32.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3 is installed AND Package Information Mesa-9.0.3-0.17.1 is installed OR Mesa-32bit-9.0.3-0.17.1 is installed OR Mesa-x86-9.0.3-0.17.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND Package Information flac-1.3.0-6.1 is installed OR libFLAC++6-1.3.0-6.1 is installed OR libFLAC8-1.3.0-6.1 is installed OR libFLAC8-32bit-1.3.0-6.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information libssh2-1-1.4.3-11 is installed OR libssh2-1-32bit-1.4.3-11 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information MozillaFirefox-45.4.0esr-81 is installed OR MozillaFirefox-translations-45.4.0esr-81 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information MozillaFirefox-52.2.0esr-108 is installed OR MozillaFirefox-translations-52.2.0esr-108 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information apache-commons-daemon-1.0.15-6 is installed OR apache-commons-daemon-javadoc-1.0.15-6 is installed Definition Synopsis SUSE Linux Enterprise Server 12-LTSS is installed AND Package Information kgraft-patch-3_12_55-52_45-default-2-2.3 is installed OR kgraft-patch-3_12_55-52_45-xen-2-2.3 is installed OR kgraft-patch-SLE12_Update_13-2-2.3 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND w3m-0.5.3.git20161120-160 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information python2-salt-3000-5.78 is installed OR python3-salt-3000-5.78 is installed OR salt-3000-5.78 is installed OR salt-api-3000-5.78 is installed OR salt-bash-completion-3000-5.78 is installed OR salt-cloud-3000-5.78 is installed OR salt-doc-3000-5.78 is installed OR salt-fish-completion-3000-5.78 is installed OR salt-master-3000-5.78 is installed OR salt-minion-3000-5.78 is installed OR salt-proxy-3000-5.78 is installed OR salt-ssh-3000-5.78 is installed OR salt-standalone-formulas-configuration-3000-5.78 is installed OR salt-syndic-3000-5.78 is installed OR salt-zsh-completion-3000-5.78 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND Package Information libsndfile-1.0.20-2.10.2 is installed OR libsndfile-devel-1.0.20-2.10.2 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND Package Information bind-9.9.6P1-0.33.1 is installed OR bind-devel-9.9.6P1-0.33.1 is installed OR bind-devel-32bit-9.9.6P1-0.33.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND libcurl-devel-7.37.0-2 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND alsa-devel-1.0.27.2-11 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information ImageMagick-6.8.8.1-33 is installed OR ImageMagick-devel-6.8.8.1-33 is installed OR libMagick++-6_Q16-3-6.8.8.1-33 is installed OR libMagick++-devel-6.8.8.1-33 is installed OR perl-PerlMagick-6.8.8.1-33 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information MozillaThunderbird-60.6.1-3.28 is installed OR MozillaThunderbird-translations-common-60.6.1-3.28 is installed OR MozillaThunderbird-translations-other-60.6.1-3.28 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND Package Information libreoffice-6.2.7.1-8.10 is installed OR libreoffice-base-6.2.7.1-8.10 is installed OR libreoffice-base-drivers-postgresql-6.2.7.1-8.10 is installed OR libreoffice-branding-upstream-6.2.7.1-8.10 is installed OR libreoffice-calc-6.2.7.1-8.10 is installed OR libreoffice-calc-extensions-6.2.7.1-8.10 is installed OR libreoffice-draw-6.2.7.1-8.10 is installed OR libreoffice-filters-optional-6.2.7.1-8.10 is installed OR libreoffice-gnome-6.2.7.1-8.10 is installed OR libreoffice-gtk3-6.2.7.1-8.10 is installed OR libreoffice-icon-themes-6.2.7.1-8.10 is installed OR libreoffice-impress-6.2.7.1-8.10 is installed OR libreoffice-l10n-af-6.2.7.1-8.10 is installed OR libreoffice-l10n-ar-6.2.7.1-8.10 is installed OR libreoffice-l10n-as-6.2.7.1-8.10 is installed OR libreoffice-l10n-bg-6.2.7.1-8.10 is installed OR libreoffice-l10n-bn-6.2.7.1-8.10 is installed OR libreoffice-l10n-br-6.2.7.1-8.10 is installed OR libreoffice-l10n-ca-6.2.7.1-8.10 is installed OR libreoffice-l10n-cs-6.2.7.1-8.10 is installed OR libreoffice-l10n-cy-6.2.7.1-8.10 is installed OR libreoffice-l10n-da-6.2.7.1-8.10 is installed OR libreoffice-l10n-de-6.2.7.1-8.10 is installed OR libreoffice-l10n-dz-6.2.7.1-8.10 is installed OR libreoffice-l10n-el-6.2.7.1-8.10 is installed OR libreoffice-l10n-en-6.2.7.1-8.10 is installed OR libreoffice-l10n-eo-6.2.7.1-8.10 is installed OR libreoffice-l10n-es-6.2.7.1-8.10 is installed OR libreoffice-l10n-et-6.2.7.1-8.10 is installed OR libreoffice-l10n-eu-6.2.7.1-8.10 is installed OR libreoffice-l10n-fa-6.2.7.1-8.10 is installed OR libreoffice-l10n-fi-6.2.7.1-8.10 is installed OR libreoffice-l10n-fr-6.2.7.1-8.10 is installed OR libreoffice-l10n-ga-6.2.7.1-8.10 is installed OR libreoffice-l10n-gl-6.2.7.1-8.10 is installed OR libreoffice-l10n-gu-6.2.7.1-8.10 is installed OR libreoffice-l10n-he-6.2.7.1-8.10 is installed OR libreoffice-l10n-hi-6.2.7.1-8.10 is installed OR libreoffice-l10n-hr-6.2.7.1-8.10 is installed OR libreoffice-l10n-hu-6.2.7.1-8.10 is installed OR libreoffice-l10n-it-6.2.7.1-8.10 is installed OR libreoffice-l10n-ja-6.2.7.1-8.10 is installed OR libreoffice-l10n-kk-6.2.7.1-8.10 is installed OR libreoffice-l10n-kn-6.2.7.1-8.10 is installed OR libreoffice-l10n-ko-6.2.7.1-8.10 is installed OR libreoffice-l10n-lt-6.2.7.1-8.10 is installed OR libreoffice-l10n-lv-6.2.7.1-8.10 is installed OR libreoffice-l10n-mai-6.2.7.1-8.10 is installed OR libreoffice-l10n-ml-6.2.7.1-8.10 is installed OR libreoffice-l10n-mr-6.2.7.1-8.10 is installed OR libreoffice-l10n-nb-6.2.7.1-8.10 is installed OR libreoffice-l10n-nl-6.2.7.1-8.10 is installed OR libreoffice-l10n-nn-6.2.7.1-8.10 is installed OR libreoffice-l10n-nr-6.2.7.1-8.10 is installed OR libreoffice-l10n-nso-6.2.7.1-8.10 is installed OR libreoffice-l10n-or-6.2.7.1-8.10 is installed OR libreoffice-l10n-pa-6.2.7.1-8.10 is installed OR libreoffice-l10n-pl-6.2.7.1-8.10 is installed OR libreoffice-l10n-pt_BR-6.2.7.1-8.10 is installed OR libreoffice-l10n-pt_PT-6.2.7.1-8.10 is installed OR libreoffice-l10n-ro-6.2.7.1-8.10 is installed OR libreoffice-l10n-ru-6.2.7.1-8.10 is installed OR libreoffice-l10n-si-6.2.7.1-8.10 is installed OR libreoffice-l10n-sk-6.2.7.1-8.10 is installed OR libreoffice-l10n-sl-6.2.7.1-8.10 is installed OR libreoffice-l10n-sr-6.2.7.1-8.10 is installed OR libreoffice-l10n-ss-6.2.7.1-8.10 is installed OR libreoffice-l10n-st-6.2.7.1-8.10 is installed OR libreoffice-l10n-sv-6.2.7.1-8.10 is installed OR libreoffice-l10n-ta-6.2.7.1-8.10 is installed OR libreoffice-l10n-te-6.2.7.1-8.10 is installed OR libreoffice-l10n-th-6.2.7.1-8.10 is installed OR libreoffice-l10n-tn-6.2.7.1-8.10 is installed OR libreoffice-l10n-tr-6.2.7.1-8.10 is installed OR libreoffice-l10n-ts-6.2.7.1-8.10 is installed OR libreoffice-l10n-uk-6.2.7.1-8.10 is installed OR libreoffice-l10n-ve-6.2.7.1-8.10 is installed OR libreoffice-l10n-xh-6.2.7.1-8.10 is installed OR libreoffice-l10n-zh_CN-6.2.7.1-8.10 is installed OR libreoffice-l10n-zh_TW-6.2.7.1-8.10 is installed OR libreoffice-l10n-zu-6.2.7.1-8.10 is installed OR libreoffice-mailmerge-6.2.7.1-8.10 is installed OR libreoffice-math-6.2.7.1-8.10 is installed OR libreoffice-officebean-6.2.7.1-8.10 is installed OR libreoffice-pyuno-6.2.7.1-8.10 is installed OR libreoffice-writer-6.2.7.1-8.10 is installed OR libreoffice-writer-extensions-6.2.7.1-8.10 is installed OR libreofficekit-6.2.7.1-8.10 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP2 is installed AND Package Information LibVNCServer-0.9.10-4.22 is installed OR libvncclient0-0.9.10-4.22 is installed OR libvncserver0-0.9.10-4.22 is installed
BACK