Oval Definition:	oval:org.opensuse.security:def:49402
Revision Date: 2020-12-01 Version: 1 Title: flatpak on GA media (Moderate) Description: These are all security issues found in the flatpak Package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15. Family: unix Class: patch Status: Reference(s): 1013712 1027282 1029377 1029902 1040164 1042670 1055014 1055186 1061843 1065729 1070853 1077428 1079761 1081750 1083507 1086001 1088004 1088009 1088573 1094814 1100369 1107030 1109160 1109663 1109847 1113225 1118367 1118368 1120644 1121268 1122191 1128220 1129346 1129889 1129923 1130040 1130840 1133452 1134760 1135881 1136029 1136480 1137715 1137792 1137940 1137942 1138313 1138358 1138459 1138494 1138614 1138822 1138977 1139453 1140697 1141853 1142038 1142518 1142662 1143856 1144155 1144211 1144889 1148125 1148177 1148311 1149121 1149792 1149955 1151490 1152489 1153238 1153953 1156205 1157051 1157652 1158108 1158109 1158328 1159035 1159622 1161168 1167631 1168104 1168994 1170667 1170713 1171313 1171740 1172745 1172958 1173307 1173311 1173411 1173983 1174320 1174421 1174748 1174969 1175052 1175443 1175626 1175656 1175898 1176092 1176485 1176674 1176713 1176804 1177086 1177211 1177353 1177410 1177411 1177470 1177739 1177749 1177750 1177754 1177755 1177765 1177814 1177817 1177854 1177855 1177856 1177861 1178002 1178079 1178122 1178246 1178392 637176 658604 673071 709442 743787 747125 751718 754447 754677 787526 809831 831629 834601 871152 885662 885882 906079 917607 942751 951166 983582 984751 985177 985348 989523 CVE-2009-5030 CVE-2011-3389 CVE-2011-4944 CVE-2012-0845 CVE-2012-1150 CVE-2012-3358 CVE-2012-3535 CVE-2013-1447 CVE-2013-1752 CVE-2013-4238 CVE-2013-4289 CVE-2013-4290 CVE-2013-6045 CVE-2013-6052 CVE-2013-6053 CVE-2013-6054 CVE-2013-6887 CVE-2014-2667 CVE-2014-4650 CVE-2016-0772 CVE-2016-1000110 CVE-2016-5636 CVE-2016-5699 CVE-2016-7445 CVE-2016-8659 CVE-2016-9798 CVE-2017-18207 CVE-2017-3136 CVE-2017-5226 CVE-2018-1000802 CVE-2018-1060 CVE-2018-1061 CVE-2018-14647 CVE-2018-20406 CVE-2018-20852 CVE-2018-5741 CVE-2019-10136 CVE-2019-10160 CVE-2019-11707 CVE-2019-11745 CVE-2019-13722 CVE-2019-14861 CVE-2019-14870 CVE-2019-15903 CVE-2019-16056 CVE-2019-16935 CVE-2019-17005 CVE-2019-17008 CVE-2019-17009 CVE-2019-17010 CVE-2019-17011 CVE-2019-17012 CVE-2019-3685 CVE-2019-5010 CVE-2019-6477 CVE-2019-9636 CVE-2019-9947 CVE-2020-10713 CVE-2020-14351 CVE-2020-14370 CVE-2020-15705 CVE-2020-16120 CVE-2020-1752 CVE-2020-25285 CVE-2020-26116 CVE-2020-8616 CVE-2020-8617 CVE-2020-8618 CVE-2020-8619 CVE-2020-8620 CVE-2020-8621 CVE-2020-8622 CVE-2020-8623 CVE-2020-8624 SUSE-SU-2019:1629-1 SUSE-SU-2019:2067-1 SUSE-SU-2019:2317-1 SUSE-SU-2019:3046-1 SUSE-SU-2019:3319-1 SUSE-SU-2019:3337-1 SUSE-SU-2020:0114-1 SUSE-SU-2020:0820-1 SUSE-SU-2020:2307-1 SUSE-SU-2020:2629-1 SUSE-SU-2020:2914-1 SUSE-SU-2020:3115-1 SUSE-SU-2020:3122-1 SUSE-SU-2020:3378-1 Platform(s): openSUSE Leap 15.0 openSUSE Leap 15.1 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for additional PackageHub packages 15 SUSE Linux Enterprise Module for additional PackageHub packages 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Containers 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for High Performance Computing 15 SUSE Linux Enterprise Module for Legacy Software 15 SUSE Linux Enterprise Module for Legacy Software 15 SP1 SUSE Linux Enterprise Module for Legacy Software 15 SP2 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Module for Live Patching 15 SP2 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Linux Enterprise Module for Python2 packages 15 SP1 SUSE Linux Enterprise Module for Realtime packages 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Web Scripting 15 SP1 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 6-LTSS SUSE OpenStack Cloud 7 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND Package Information neovim-0.3.7-lp151.2.7 is installed OR neovim-lang-0.3.7-lp151.2.7 is installed Definition Synopsis openSUSE Leap 15.1 is installed AND Package Information libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3 is installed OR libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3 is installed OR libwebkit2gtk-4_0-37-2.24.2-lp151.2.3 is installed OR libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3 is installed OR libwebkit2gtk3-lang-2.24.2-lp151.2.3 is installed OR typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3 is installed OR typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3 is installed OR typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3 is installed OR webkit-jsc-4-2.24.2-lp151.2.3 is installed OR webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3 is installed OR webkit2gtk3-2.24.2-lp151.2.3 is installed OR webkit2gtk3-devel-2.24.2-lp151.2.3 is installed OR webkit2gtk3-minibrowser-2.24.2-lp151.2.3 is installed OR webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information xorg-x11-libXext-7.4-1.18 is installed OR xorg-x11-libXext-32bit-7.4-1.18 is installed OR xorg-x11-libXext-devel-7.4-1.18 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information MozillaFirefox-31.5.3esr-0.8 is installed OR MozillaFirefox-translations-31.5.3esr-0.8 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND kvm-1.4.2-32 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information accountsservice-0.6.35-1 is installed OR accountsservice-lang-0.6.35-1 is installed OR libaccountsservice0-0.6.35-1 is installed OR typelib-1_0-AccountsService-1_0-0.6.35-1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information dia-0.97.2-13 is installed OR dia-lang-0.97.2-13 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND xinetd-2.3.15-7 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information libudisks2-0-2.1.3-1 is installed OR udisks2-2.1.3-1 is installed OR udisks2-lang-2.1.3-1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information libopenssl0_9_8-0.9.8j-106.6 is installed OR libopenssl0_9_8-32bit-0.9.8j-106.6 is installed Definition Synopsis SUSE Linux Enterprise Module for additional PackageHub packages 15 is installed AND taglib-1.11.1-4.3 is installed Definition Synopsis SUSE Linux Enterprise Module for additional PackageHub packages 15 SP1 is installed AND libjpeg-turbo-1.5.3-5.15 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed AND Package Information libpython3_6m1_0-3.6.10-3.42 is installed OR python3-3.6.10-3.42 is installed OR python3-base-3.6.10-3.42 is installed OR python3-curses-3.6.10-3.42 is installed OR python3-dbm-3.6.10-3.42 is installed OR python3-devel-3.6.10-3.42 is installed OR python3-idle-3.6.10-3.42 is installed OR python3-tk-3.6.10-3.42 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed AND shim-15+git47-3.8 is installed Definition Synopsis SUSE Linux Enterprise Module for Containers 15 SP2 is installed AND Package Information podman-2.1.1-4.28 is installed OR podman-cni-config-2.1.1-4.28 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 is installed AND Package Information flatpak-0.10.4-2 is installed OR flatpak-devel-0.10.4-2 is installed OR libflatpak0-0.10.4-2 is installed OR typelib-1_0-Flatpak-1_0-0.10.4-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed AND Package Information python-2.7.17-7.44 is installed OR python-tk-2.7.17-7.44 is installed Definition Synopsis SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed AND osc-0.165.4-3.9 is installed Definition Synopsis SUSE Linux Enterprise Module for Development Tools 15 SP2 is installed AND Package Information kernel-docs-5.3.18-24.34 is installed OR kernel-obs-build-5.3.18-24.34 is installed OR kernel-preempt-5.3.18-24.34 is installed OR kernel-preempt-devel-5.3.18-24.34 is installed OR kernel-source-5.3.18-24.34 is installed OR kernel-syms-5.3.18-24.34 is installed Definition Synopsis SUSE Linux Enterprise Module for High Performance Computing 15 is installed AND Package Information libmunge2-0.5.13-4.3 is installed OR munge-0.5.13-4.3 is installed OR munge-devel-0.5.13-4.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 is installed AND Package Information kernel-default-4.12.14-150.32 is installed OR reiserfs-kmp-default-4.12.14-150.32 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 SP1 is installed AND Package Information openldap2-2.4.46-9.19 is installed OR openldap2-back-meta-2.4.46-9.19 is installed OR openldap2-back-perl-2.4.46-9.19 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 SP2 is installed AND Package Information kernel-default-5.3.18-24.15 is installed OR reiserfs-kmp-default-5.3.18-24.15 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 is installed AND Package Information kernel-livepatch-4_12_14-150_41-default-5-2 is installed OR kernel-livepatch-SLE15_Update_16-5-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND Package Information kernel-default-4.12.14-197.10 is installed OR kernel-default-livepatch-4.12.14-197.10 is installed OR kernel-default-livepatch-devel-4.12.14-197.10 is installed OR kernel-livepatch-4_12_14-197_10-default-1-3.3 is installed OR kernel-livepatch-SLE15-SP1_Update_3-1-3.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP2 is installed AND Package Information kernel-livepatch-5_3_18-24_9-default-2-2 is installed OR kernel-livepatch-SLE15-SP2_Update_1-2-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 is installed AND Package Information golang-github-prometheus-alertmanager-0.16.2-3.3 is installed OR golang-github-prometheus-prometheus-2.11.1-3.6 is installed OR python2-rhnlib-4.0.11-3.10 is installed OR rhnlib-4.0.11-3.10 is installed OR spacecmd-4.0.14-3.26 is installed OR spacewalk-backend-4.0.25-3.23 is installed OR spacewalk-backend-app-4.0.25-3.23 is installed OR spacewalk-backend-applet-4.0.25-3.23 is installed OR spacewalk-backend-cdn-4.0.25-3.23 is installed OR spacewalk-backend-config-files-4.0.25-3.23 is installed OR spacewalk-backend-config-files-common-4.0.25-3.23 is installed OR spacewalk-backend-config-files-tool-4.0.25-3.23 is installed OR spacewalk-backend-iss-4.0.25-3.23 is installed OR spacewalk-backend-iss-export-4.0.25-3.23 is installed OR spacewalk-backend-libs-4.0.25-3.23 is installed OR spacewalk-backend-package-push-server-4.0.25-3.23 is installed OR spacewalk-backend-server-4.0.25-3.23 is installed OR spacewalk-backend-sql-4.0.25-3.23 is installed OR spacewalk-backend-sql-oracle-4.0.25-3.23 is installed OR spacewalk-backend-sql-postgresql-4.0.25-3.23 is installed OR spacewalk-backend-tools-4.0.25-3.23 is installed OR spacewalk-backend-xml-export-libs-4.0.25-3.23 is installed OR spacewalk-backend-xmlrpc-4.0.25-3.23 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed AND Package Information MozillaFirefox-60.7.1-3.45 is installed OR MozillaFirefox-branding-upstream-60.7.1-3.45 is installed OR MozillaFirefox-buildsymbols-60.7.1-3.45 is installed OR MozillaFirefox-devel-60.7.1-3.45 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 is installed AND Package Information freetds-1.1.36-3.3 is installed OR freetds-config-1.1.36-3.3 is installed OR freetds-devel-1.1.36-3.3 is installed OR freetds-doc-1.1.36-3.3 is installed OR freetds-tools-1.1.36-3.3 is installed OR libsybdb5-1.1.36-3.3 is installed OR libtdsodbc0-1.1.36-3.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed AND Package Information kernel-azure-4.12.14-8.16 is installed OR kernel-azure-base-4.12.14-8.16 is installed OR kernel-azure-devel-4.12.14-8.16 is installed OR kernel-devel-azure-4.12.14-8.16 is installed OR kernel-source-azure-4.12.14-8.16 is installed OR kernel-syms-azure-4.12.14-8.16 is installed Definition Synopsis SUSE Linux Enterprise Module for Python2 packages 15 SP1 is installed AND Package Information python-numpy-1.16.1-4.8 is installed OR python2-numpy-1.16.1-4.8 is installed OR python2-numpy-devel-1.16.1-4.8 is installed Definition Synopsis SUSE Linux Enterprise Module for Realtime packages 15 SP1 is installed AND Package Information cluster-md-kmp-rt-4.12.14-14.31 is installed OR dlm-kmp-rt-4.12.14-14.31 is installed OR gfs2-kmp-rt-4.12.14-14.31 is installed OR kernel-devel-rt-4.12.14-14.31 is installed OR kernel-rt-4.12.14-14.31 is installed OR kernel-rt-base-4.12.14-14.31 is installed OR kernel-rt-devel-4.12.14-14.31 is installed OR kernel-rt_debug-4.12.14-14.31 is installed OR kernel-rt_debug-devel-4.12.14-14.31 is installed OR kernel-source-rt-4.12.14-14.31 is installed OR kernel-syms-rt-4.12.14-14.31 is installed OR ocfs2-kmp-rt-4.12.14-14.31 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 is installed AND squid-4.8-5.8 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed AND Package Information nginx-1.14.2-6.7 is installed OR nginx-source-1.14.2-6.7 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 SP1 is installed AND Package Information nodejs8-8.16.1-3.20 is installed OR nodejs8-devel-8.16.1-3.20 is installed OR nodejs8-docs-8.16.1-3.20 is installed OR npm8-8.16.1-3.20 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information aaa_base-13.2+git20140911.61c1681-9 is installed OR aaa_base-extras-13.2+git20140911.61c1681-9 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kgraft-patch-3_12_74-60_64_48-default-2-2 is installed OR kgraft-patch-3_12_74-60_64_48-xen-2-2 is installed OR kgraft-patch-SLE12-SP1_Update_17-2-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information accountsservice-0.6.42-14 is installed OR accountsservice-lang-0.6.42-14 is installed OR libaccountsservice0-0.6.42-14 is installed OR typelib-1_0-AccountsService-1_0-0.6.42-14 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information openssh-7.2p2-74.25 is installed OR openssh-askpass-gnome-7.2p2-74.25 is installed OR openssh-fips-7.2p2-74.25 is installed OR openssh-helpers-7.2p2-74.25 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information git-2.12.3-27.14 is installed OR git-core-2.12.3-27.14 is installed OR git-doc-2.12.3-27.14 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information kgraft-patch-4_4_103-92_56-default-10-2 is installed OR kgraft-patch-SLE12-SP2_Update_17-10-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information ghostscript-9.15-22 is installed OR ghostscript-x11-9.15-22 is installed Definition Synopsis SUSE Linux Enterprise Server 15-LTSS is installed AND Package Information nodejs8-8.17.0-3.28 is installed OR nodejs8-devel-8.17.0-3.28 is installed OR nodejs8-docs-8.17.0-3.28 is installed OR npm8-8.17.0-3.28 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information libunbound2-1.6.8-3.6 is installed OR unbound-1.6.8-3.6 is installed OR unbound-anchor-1.6.8-3.6 is installed OR unbound-devel-1.6.8-3.6 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information kernel-default-4.12.14-150.17 is installed OR kernel-default-extra-4.12.14-150.17 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND Package Information MozillaThunderbird-68.3.0-3.61 is installed OR MozillaThunderbird-translations-common-68.3.0-3.61 is installed OR MozillaThunderbird-translations-other-68.3.0-3.61 is installed Definition Synopsis SUSE OpenStack Cloud 6 is installed AND Package Information librelp-1.2.7-3.3 is installed OR librelp0-1.2.7-3.3 is installed Definition Synopsis SUSE OpenStack Cloud 6-LTSS is installed AND python-cryptography-2.1.4-3.15 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND Package Information openstack-glance-13.0.1~a0~dev6-4.3 is installed OR openstack-glance-api-13.0.1~a0~dev6-4.3 is installed OR openstack-glance-doc-13.0.1~a0~dev6-4.3 is installed OR openstack-glance-glare-13.0.1~a0~dev6-4.3 is installed OR openstack-glance-registry-13.0.1~a0~dev6-4.3 is installed OR python-glance-13.0.1~a0~dev6-4.3 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND Package Information java-1_7_1-ibm-1.7.1_sr4.50-38.41 is installed OR java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41 is installed OR java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41 is installed OR java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41 is installed
BACK