Oval Definition:	oval:org.opensuse.security:def:4853
Revision Date: 2020-12-02 Version: 1 Title: Security update for rsyslog (Moderate) Description: This update for rsyslog fixes the following issues: Security issues fixed: - CVE-2019-17041: Fixed a heap overflow in the parser for AIX log messages (bsc#1153451). - CVE-2019-17042: Fixed a heap overflow in the parser for Cisco log messages (bsc#1153459). Other issue addressed: - Fixed an issue where rsyslog was SEGFAULT due to a mutex double-unlock (bsc#1141063). Family: unix Class: patch Status: Reference(s): 1046305 1046306 1046307 1051510 1058115 1065600 1065729 1071995 1081917 1083548 1083647 1085030 1086288 1086315 1086317 1086327 1086331 1086906 1087092 1090888 1097104 1097577 1097583 1097584 1097585 1097586 1097587 1097588 1097808 1100132 1101480 1101669 1101822 1102517 1102715 1103269 1103277 1103363 1103445 1103886 1104353 1104365 1104427 1104482 1104494 1104495 1104683 1104708 1104777 1104890 1104897 1105292 1105296 1105322 1105355 1105378 1105396 1105467 1105731 1111666 1112178 1113956 1120163 1131644 1131868 1131870 1131871 1131872 1131874 1133021 1133640 1135855 1136666 1141063 1144333 1144443 1150934 1152148 1153451 1153459 1156920 1159104 1163524 1165629 1166751 1166933 1166965 1167331 1169790 1170232 1170446 1170452 1171558 1171688 1171988 1172073 1172108 1172247 1172418 1172428 1172686 1172871 1172872 1172873 1172963 1173060 1173485 1173594 1173798 1173902 1173937 1173954 1173994 1174003 1174026 1174070 1174205 1174387 1174484 1174547 1174549 1174550 1174625 1174658 1174685 1174689 1174699 1174734 1174757 1174771 1174840 1174841 1174843 1174844 1174845 1174852 1174873 1174904 1174926 1174968 1175062 1175063 1175064 1175065 1175066 1175067 1175112 1175127 1175128 1175149 1175199 1175213 1175228 1175232 1175284 1175393 1175394 1175396 1175397 1175398 1175399 1175400 1175401 1175402 1175403 1175404 1175405 1175406 1175407 1175408 1175409 1175410 1175411 1175412 1175413 1175414 1175415 1175416 1175417 1175418 1175419 1175420 1175421 1175422 1175423 1175440 1175493 1175515 1175518 1175526 1175550 1175654 1175666 1175667 1175668 1175669 1175670 1175691 1175767 1175768 1175769 1175770 1175771 1175772 1175786 1175873 1176069 1176589 1177613 802154 930077 930078 930079 971975 CVE-2009-0758 CVE-2010-2244 CVE-2011-1002 CVE-2012-3466 CVE-2013-1981 CVE-2013-1997 CVE-2013-2004 CVE-2013-2062 CVE-2015-4141 CVE-2015-4142 CVE-2015-4143 CVE-2015-8041 CVE-2017-13077 CVE-2017-13078 CVE-2017-13079 CVE-2017-13080 CVE-2017-13081 CVE-2017-13082 CVE-2017-13086 CVE-2017-13087 CVE-2017-13088 CVE-2018-10853 CVE-2018-10902 CVE-2018-14526 CVE-2018-15572 CVE-2018-9363 CVE-2019-11555 CVE-2019-12269 CVE-2019-13377 CVE-2019-16275 CVE-2019-17041 CVE-2019-17042 CVE-2019-19725 CVE-2019-9494 CVE-2019-9495 CVE-2019-9497 CVE-2019-9498 CVE-2019-9499 CVE-2020-0556 CVE-2020-10135 CVE-2020-12105 CVE-2020-14314 CVE-2020-14318 CVE-2020-14323 CVE-2020-14331 CVE-2020-14356 CVE-2020-14383 CVE-2020-14386 CVE-2020-15095 CVE-2020-16166 CVE-2020-1749 CVE-2020-24394 CVE-2020-8252 CVE-2020-8695 CVE-2020-8698 SUSE-SU-2018:2539-1 SUSE-SU-2019:1576-1 SUSE-SU-2019:2937-1 SUSE-SU-2020:0918-1 SUSE-SU-2020:1337-1 SUSE-SU-2020:1419-1 SUSE-SU-2020:2575-1 SUSE-SU-2020:2829-1 SUSE-SU-2020:3087-1 SUSE-SU-2020:3275-1 SUSE-SU-2020:3380-1 Platform(s): SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise High Availability 12 SUSE Linux Enterprise High Availability 12 SP1 SUSE Linux Enterprise High Availability 12 SP2 SUSE Linux Enterprise High Availability 12 SP3 SUSE Linux Enterprise High Availability 12 SP4 SUSE Linux Enterprise High Availability 12 SP5 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Live Patching 12 SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Web Scripting 12 SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE OpenStack Cloud 5 Product(s): Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND libssh2-0.2-5.18.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information avahi-0.6.31-20 is installed OR avahi-lang-0.6.31-20 is installed OR libavahi-client3-0.6.31-20 is installed OR libavahi-client3-32bit-0.6.31-20 is installed OR libavahi-common3-0.6.31-20 is installed OR libavahi-common3-32bit-0.6.31-20 is installed OR libavahi-core7-0.6.31-20 is installed OR libdns_sd-0.6.31-20 is installed OR libdns_sd-32bit-0.6.31-20 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information dia-0.97.2-13 is installed OR dia-lang-0.97.2-13 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND cifs-utils-6.5-8 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information ImageMagick-6.8.8.1-70 is installed OR libMagick++-6_Q16-3-6.8.8.1-70 is installed OR libMagickCore-6_Q16-1-6.8.8.1-70 is installed OR libMagickCore-6_Q16-1-32bit-6.8.8.1-70 is installed OR libMagickWand-6_Q16-1-6.8.8.1-70 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information at-3.1.14-8.6 is installed OR libQtWebKit4-4.8.7+2.3.4-4.7 is installed OR libQtWebKit4-32bit-4.8.7+2.3.4-4.7 is installed OR libbonobo-2.32.1-16 is installed OR libbonobo-32bit-2.32.1-16 is installed OR libbonobo-lang-2.32.1-16 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 is installed AND Package Information ctdb-4.2.4-18.44.2 is installed OR samba-4.2.4-18.44.2 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP1 is installed AND Package Information ctdb-4.2.4-26.2 is installed OR samba-4.2.4-26.2 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP2 is installed AND Package Information libpcreposix0-8.39-5.1 is installed OR pcre-8.39-5.1 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP3 is installed AND conntrack-tools-1.4.2-5 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP4 is installed AND haproxy-1.6.11-10 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP5 is installed AND Package Information libpacemaker3-1.1.21+20190809.bf34b44fa-1 is installed OR pacemaker-1.1.21+20190809.bf34b44fa-1 is installed OR pacemaker-cli-1.1.21+20190809.bf34b44fa-1 is installed OR pacemaker-cts-1.1.21+20190809.bf34b44fa-1 is installed OR pacemaker-remote-1.1.21+20190809.bf34b44fa-1 is installed Definition Synopsis SUSE Linux Enterprise High Performance Computing 12 SP5 is installed AND Package Information aaa_base-13.2+git20140911.61c1681-38.13 is installed OR aaa_base-extras-13.2+git20140911.61c1681-38.13 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 is installed AND Package Information kgraft-patch-3_12_36-38-default-3-2.1 is installed OR kgraft-patch-3_12_36-38-xen-3-2.1 is installed OR kgraft-patch-SLE12_Update_2-3-2.1 is installed Definition Synopsis SUSE Linux Enterprise Module for Advanced Systems Management 12 is installed AND Package Information salt-2016.11.4-45.2 is installed OR salt-api-2016.11.4-45.2 is installed OR salt-bash-completion-2016.11.4-45.2 is installed OR salt-cloud-2016.11.4-45.2 is installed OR salt-doc-2016.11.4-45.2 is installed OR salt-master-2016.11.4-45.2 is installed OR salt-minion-2016.11.4-45.2 is installed OR salt-proxy-2016.11.4-45.2 is installed OR salt-ssh-2016.11.4-45.2 is installed OR salt-syndic-2016.11.4-45.2 is installed OR salt-zsh-completion-2016.11.4-45.2 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed AND Package Information rsyslog-8.33.1-3.22 is installed OR rsyslog-module-gssapi-8.33.1-3.22 is installed OR rsyslog-module-gtls-8.33.1-3.22 is installed OR rsyslog-module-mmnormalize-8.33.1-3.22 is installed OR rsyslog-module-mysql-8.33.1-3.22 is installed OR rsyslog-module-pgsql-8.33.1-3.22 is installed OR rsyslog-module-relp-8.33.1-3.22 is installed OR rsyslog-module-snmp-8.33.1-3.22 is installed OR rsyslog-module-udpspoof-8.33.1-3.22 is installed Definition Synopsis SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT is installed AND Package Information libpython3_4m1_0-3.4.6-25.21 is installed OR python3-3.4.6-25.21 is installed OR python3-base-3.4.6-25.21 is installed OR python3-curses-3.4.6-25.21 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2 is installed AND Package Information libicu-4.0-7.26.1 is installed OR libicu-32bit-4.0-7.26.1 is installed OR libicu-doc-4.0-7.26.1 is installed OR libicu-x86-4.0-7.24.11 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP3 is installed AND hplip-3.11.10-0.6.11.1 is installed OR hplip-hpijs-3.11.10-0.6.11.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP3 is installed AND hplip-3.11.10-0.6.11.1 is installed OR hplip-hpijs-3.11.10-0.6.11.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3 is installed AND Package Information MozillaFirefox-17.0.4esr-0.10.42 is installed OR MozillaFirefox-translations-17.0.4esr-0.10.42 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND Package Information cpio-2.11-29.1 is installed OR cpio-lang-2.11-29.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND perl-HTML-Parser-3.71-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information accountsservice-0.6.42-14 is installed OR accountsservice-lang-0.6.42-14 is installed OR libaccountsservice0-0.6.42-14 is installed OR typelib-1_0-AccountsService-1_0-0.6.42-14 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information bash-4.3-82 is installed OR bash-doc-4.3-82 is installed OR libreadline6-6.3-82 is installed OR libreadline6-32bit-6.3-82 is installed OR readline-doc-6.3-82 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information aaa_base-13.2+git20140911.61c1681-38.8 is installed OR aaa_base-extras-13.2+git20140911.61c1681-38.8 is installed Definition Synopsis SUSE Linux Enterprise Server 12-LTSS is installed AND Package Information kgraft-patch-3_12_60-52_54-default-2-2.2 is installed OR kgraft-patch-3_12_60-52_54-xen-2-2.2 is installed OR kgraft-patch-SLE12_Update_15-2-2.2 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND Package Information qemu-2.6.2-31 is installed OR qemu-arm-2.6.2-31 is installed OR qemu-block-curl-2.6.2-31 is installed OR qemu-block-rbd-2.6.2-31 is installed OR qemu-block-ssh-2.6.2-31 is installed OR qemu-guest-agent-2.6.2-31 is installed OR qemu-ipxe-1.0.0-31 is installed OR qemu-lang-2.6.2-31 is installed OR qemu-tools-2.6.2-31 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information nodejs10-10.22.1-1.27 is installed OR nodejs10-devel-10.22.1-1.27 is installed OR nodejs10-docs-10.22.1-1.27 is installed OR npm10-10.22.1-1.27 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND Package Information popt-devel-1.7-37.60.2 is installed OR popt-devel-32bit-1.7-37.60.2 is installed OR rpm-32bit-4.4.2.3-37.60.2 is installed OR rpm-devel-4.4.2.3-37.60.2 is installed OR rpm-devel-32bit-4.4.2.3-37.60.2 is installed OR rpm-x86-4.4.2.3-37.60.2 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND Package Information java-1_7_1-ibm-1.7.1_sr3.10-3.1 is installed OR java-1_7_1-ibm-devel-1.7.1_sr3.10-3.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND librpcsecgss-devel-0.19-16 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND coolkey-devel-1.1.0-147 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND alsa-devel-1.0.27.2-11 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND Package Information FastCGI-2.4.0-168 is installed OR FastCGI-devel-2.4.0-168 is installed OR perl-FastCGI-2.4.0-168 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information kernel-default-4.12.14-25.16 is installed OR kernel-default-extra-4.12.14-25.16 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND Package Information openconnect-7.08-6.6 is installed OR openconnect-devel-7.08-6.6 is installed OR openconnect-lang-7.08-6.6 is installed
BACK