| Revision Date: | 2020-12-01 | Version: | 1 |
| Title: | Security update for openslp (Important) |
| Description: |
This update for openslp fixes the following issues:
- CVE-2017-17833: Prevent heap-related memory corruption issue which may have manifested itself as a denial-of-service or a remote code-execution vulnerability (bsc#1090638) - Prevent out of bounds reads in message parsing
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | 1012382
1031392
1040109
1040113
1040115
1051510
1055120
1061840
1065729
1071995
1082519
1085030
1088047
1090078
1090638
1094244
1098633
1098782
1101669
1102495
1103269
1103405
1103587
1103636
1103990
1103991
1103992
1104888
1105190
1105795
1106105
1106240
1106383
1106948
1107783
1107829
1107928
1107947
1108096
1108170
1108281
1108323
1108399
1108823
1109244
1109333
1109336
1109337
1109603
1109806
1109837
1109859
1109979
1109992
1110006
1110301
1110363
1110639
1110642
1110643
1110644
1110645
1110646
1110647
1110649
1110650
1111666
1112374
1114685
1119113
1119532
1120423
1121717
1123919
1125401
1125703
1128902
1130836
1131645
1132390
1133401
1133738
1134303
1134395
1135556
1135642
1135897
1136161
1136264
1136343
1136935
1137625
1137728
1138879
1139712
1139751
1139771
1139865
1140133
1140228
1140328
1140405
1140424
1140428
1140454
1140463
1140575
1140577
1140637
1140658
1140715
1140719
1140726
1140727
1140728
1140814
1140887
1140888
1140889
1140891
1140893
1140948
1140954
1140955
1140956
1140957
1140958
1140959
1140960
1140961
1140962
1140964
1140971
1140972
1140992
1143436
1145383
1146608
1159922
1159923
1159924
1159927
1160467
1160468
1169740
1171355
1172177
1172356
1172491
1172651
1173334
1174543
1175223
992038
CVE-2017-17833
CVE-2017-9111
CVE-2017-9113
CVE-2017-9115
CVE-2018-14633
CVE-2018-17182
CVE-2018-20836
CVE-2018-8956
CVE-2019-10126
CVE-2019-10638
CVE-2019-10639
CVE-2019-11045
CVE-2019-11046
CVE-2019-11047
CVE-2019-11050
CVE-2019-11599
CVE-2019-13233
CVE-2019-14806
CVE-2019-14896
CVE-2019-14897
CVE-2019-14973
CVE-2019-3881
CVE-2019-6250
CVE-2020-11868
CVE-2020-13790
CVE-2020-13817
CVE-2020-15025
CVE-2020-7068
CVE-2020-8164
SUSE-SU-2018:1917-1
SUSE-SU-2018:3159-1
SUSE-SU-2019:0110-1
SUSE-SU-2019:1854-1
SUSE-SU-2019:1963-1
SUSE-SU-2019:2308-1
SUSE-SU-2019:3087-1
SUSE-SU-2020:0101-1
SUSE-SU-2020:0204-1
SUSE-SU-2020:1823-1
SUSE-SU-2020:2456-1
SUSE-SU-2020:2569-1
SUSE-SU-2020:2744-1
|
| Platform(s): | SUSE Linux Enterprise Desktop 11 SP2
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise Module for additional PackageHub packages 15 SP1
SUSE Linux Enterprise Module for additional PackageHub packages 15 SP2
SUSE Linux Enterprise Module for Basesystem 15
SUSE Linux Enterprise Module for Legacy Software 15 SP2
SUSE Linux Enterprise Module for Live Patching 15 SP1
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2
SUSE Linux Enterprise Module for Public Cloud 15
SUSE Linux Enterprise Module for Server Applications 15
SUSE Linux Enterprise Module for Server Applications 15 SP1
SUSE Linux Enterprise Module for Server Applications 15 SP2
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP1-LTSS
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP2-BCL
SUSE Linux Enterprise Server 12 SP2-ESPOS
SUSE Linux Enterprise Server 12 SP2-LTSS
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 15-LTSS
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Workstation Extension 15
SUSE Linux Enterprise Workstation Extension 15 SP1
SUSE OpenStack Cloud 6
SUSE OpenStack Cloud 7
SUSE OpenStack Cloud 8
SUSE OpenStack Cloud Crowbar 8
| Product(s): | |
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information
libxslt-1.1.24-19.23 is installed
OR libxslt-32bit-1.1.24-19.23 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 11 SP3 is installed
AND Package Information
dhcp-4.2.4.P2-0.24 is installed
OR dhcp-client-4.2.4.P2-0.24 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 is installed
AND Package Information
gd-2.1.0-3 is installed
OR gd-32bit-2.1.0-3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP1 is installed
AND Package Information
dhcp-4.3.3-2 is installed
OR dhcp-client-4.3.3-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP2 is installed
AND Package Information
libXfixes3-5.0.1-3 is installed
OR libXfixes3-32bit-5.0.1-3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP3 is installed
AND busybox-1.21.1-3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP4 is installed
AND Package Information
libQt5Concurrent5-5.6.2-6.12 is installed
OR libQt5Core5-5.6.2-6.12 is installed
OR libQt5DBus5-5.6.2-6.12 is installed
OR libQt5Gui5-5.6.2-6.12 is installed
OR libQt5Network5-5.6.2-6.12 is installed
OR libQt5OpenGL5-5.6.2-6.12 is installed
OR libQt5PrintSupport5-5.6.2-6.12 is installed
OR libQt5Sql5-5.6.2-6.12 is installed
OR libQt5Sql5-mysql-5.6.2-6.12 is installed
OR libQt5Sql5-postgresql-5.6.2-6.12 is installed
OR libQt5Sql5-sqlite-5.6.2-6.12 is installed
OR libQt5Sql5-unixODBC-5.6.2-6.12 is installed
OR libQt5Test5-5.6.2-6.12 is installed
OR libQt5Widgets5-5.6.2-6.12 is installed
OR libQt5Xml5-5.6.2-6.12 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for additional PackageHub packages 15 SP1 is installed
AND tiff-4.0.9-5.30 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for additional PackageHub packages 15 SP2 is installed
AND Package Information
php7-7.4.6-3.6 is installed
OR php7-embed-7.4.6-3.6 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Basesystem 15 is installed
AND Package Information
openslp-2.0.0-6.3 is installed
OR openslp-32bit-2.0.0-6.3 is installed
OR openslp-devel-2.0.0-6.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Legacy Software 15 SP2 is installed
AND ntp-4.2.8p15-4.10 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed
AND Package Information
kernel-livepatch-4_12_14-197_29-default-2-2 is installed
OR kernel-livepatch-SLE15-SP1_Update_8-2-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 is installed
AND Package Information
zeromq-4.2.3-3.3 is installed
OR zeromq-tools-4.2.3-3.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed
AND Package Information
dtb-aarch64-4.12.14-197.10 is installed
OR dtb-al-4.12.14-197.10 is installed
OR dtb-allwinner-4.12.14-197.10 is installed
OR dtb-altera-4.12.14-197.10 is installed
OR dtb-amd-4.12.14-197.10 is installed
OR dtb-amlogic-4.12.14-197.10 is installed
OR dtb-apm-4.12.14-197.10 is installed
OR dtb-arm-4.12.14-197.10 is installed
OR dtb-broadcom-4.12.14-197.10 is installed
OR dtb-cavium-4.12.14-197.10 is installed
OR dtb-exynos-4.12.14-197.10 is installed
OR dtb-freescale-4.12.14-197.10 is installed
OR dtb-hisilicon-4.12.14-197.10 is installed
OR dtb-lg-4.12.14-197.10 is installed
OR dtb-marvell-4.12.14-197.10 is installed
OR dtb-mediatek-4.12.14-197.10 is installed
OR dtb-nvidia-4.12.14-197.10 is installed
OR dtb-qcom-4.12.14-197.10 is installed
OR dtb-renesas-4.12.14-197.10 is installed
OR dtb-rockchip-4.12.14-197.10 is installed
OR dtb-socionext-4.12.14-197.10 is installed
OR dtb-sprd-4.12.14-197.10 is installed
OR dtb-xilinx-4.12.14-197.10 is installed
OR dtb-zte-4.12.14-197.10 is installed
OR kernel-debug-4.12.14-197.10 is installed
OR kernel-debug-base-4.12.14-197.10 is installed
OR kernel-debug-devel-4.12.14-197.10 is installed
OR kernel-debug-livepatch-devel-4.12.14-197.10 is installed
OR kernel-default-4.12.14-197.10 is installed
OR kernel-default-livepatch-4.12.14-197.10 is installed
OR kernel-docs-4.12.14-197.10 is installed
OR kernel-docs-html-4.12.14-197.10 is installed
OR kernel-kvmsmall-4.12.14-197.10 is installed
OR kernel-kvmsmall-base-4.12.14-197.10 is installed
OR kernel-kvmsmall-devel-4.12.14-197.10 is installed
OR kernel-kvmsmall-livepatch-devel-4.12.14-197.10 is installed
OR kernel-obs-qa-4.12.14-197.10 is installed
OR kernel-source-4.12.14-197.10 is installed
OR kernel-source-vanilla-4.12.14-197.10 is installed
OR kernel-vanilla-4.12.14-197.10 is installed
OR kernel-vanilla-base-4.12.14-197.10 is installed
OR kernel-vanilla-devel-4.12.14-197.10 is installed
OR kernel-vanilla-livepatch-devel-4.12.14-197.10 is installed
OR kernel-zfcpdump-4.12.14-197.10 is installed
OR kernel-zfcpdump-man-4.12.14-197.10 is installed
OR kselftests-kmp-default-4.12.14-197.10 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 is installed
AND Package Information
ruby2.5-rubygem-bundler-doc-1.16.1-3.3 is installed
OR rubygem-bundler-1.16.1-3.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Public Cloud 15 is installed
AND Package Information
kernel-azure-4.12.14-5.33 is installed
OR kernel-azure-base-4.12.14-5.33 is installed
OR kernel-azure-devel-4.12.14-5.33 is installed
OR kernel-devel-azure-4.12.14-5.33 is installed
OR kernel-source-azure-4.12.14-5.33 is installed
OR kernel-syms-azure-4.12.14-5.33 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Server Applications 15 is installed
AND squid-4.8-5.8 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed
AND Package Information
libecpg6-10.9-8.3 is installed
OR postgresql10-10.9-8.3 is installed
OR postgresql10-contrib-10.9-8.3 is installed
OR postgresql10-devel-10.9-8.3 is installed
OR postgresql10-docs-10.9-8.3 is installed
OR postgresql10-plperl-10.9-8.3 is installed
OR postgresql10-plpython-10.9-8.3 is installed
OR postgresql10-pltcl-10.9-8.3 is installed
OR postgresql10-server-10.9-8.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Server Applications 15 SP2 is installed
AND squid-4.13-5.23 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP1 is installed
AND ant-1.9.4-1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP1-LTSS is installed
AND Package Information
kgraft-patch-3_12_74-60_64_51-default-9-2 is installed
OR kgraft-patch-3_12_74-60_64_51-xen-9-2 is installed
OR kgraft-patch-SLE12-SP1_Update_18-9-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2 is installed
AND Package Information
guestfs-data-1.32.4-14 is installed
OR guestfs-tools-1.32.4-14 is installed
OR guestfsd-1.32.4-14 is installed
OR libguestfs0-1.32.4-14 is installed
OR perl-Sys-Guestfs-1.32.4-14 is installed
OR python-libguestfs-1.32.4-14 is installed
OR virt-p2v-1.32.4-14 is installed
OR virt-v2v-1.32.4-14 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-BCL is installed
AND Package Information
ghostscript-9.25-23.13 is installed
OR ghostscript-x11-9.25-23.13 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
AND Package Information
kgraft-patch-4_4_90-92_50-default-12-2 is installed
OR kgraft-patch-SLE12-SP2_Update_15-12-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-LTSS is installed
AND Package Information
gpg2-2.0.24-9.3 is installed
OR gpg2-lang-2.0.24-9.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3 is installed
AND Package Information
gstreamer-plugins-base-1.8.3-12 is installed
OR gstreamer-plugins-base-lang-1.8.3-12 is installed
OR libgstallocators-1_0-0-1.8.3-12 is installed
OR libgstapp-1_0-0-1.8.3-12 is installed
OR libgstapp-1_0-0-32bit-1.8.3-12 is installed
OR libgstaudio-1_0-0-1.8.3-12 is installed
OR libgstaudio-1_0-0-32bit-1.8.3-12 is installed
OR libgstfft-1_0-0-1.8.3-12 is installed
OR libgstpbutils-1_0-0-1.8.3-12 is installed
OR libgstpbutils-1_0-0-32bit-1.8.3-12 is installed
OR libgstriff-1_0-0-1.8.3-12 is installed
OR libgstrtp-1_0-0-1.8.3-12 is installed
OR libgstrtsp-1_0-0-1.8.3-12 is installed
OR libgstsdp-1_0-0-1.8.3-12 is installed
OR libgsttag-1_0-0-1.8.3-12 is installed
OR libgsttag-1_0-0-32bit-1.8.3-12 is installed
OR libgstvideo-1_0-0-1.8.3-12 is installed
OR libgstvideo-1_0-0-32bit-1.8.3-12 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-LTSS is installed
AND Package Information
kgraft-patch-4_4_176-94_88-default-3-2 is installed
OR kgraft-patch-SLE12-SP3_Update_24-3-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
AND unzip-6.00-33.8 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 15-LTSS is installed
AND Package Information
libpainter0-0.9.6-4.8 is installed
OR librfxencode0-0.9.6-4.8 is installed
OR xrdp-0.9.6-4.8 is installed
OR xrdp-devel-0.9.6-4.8 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server for SAP Applications 15 is installed
AND Package Information
rpmlint-1.10-7.12 is installed
OR rpmlint-mini-1.10-5.12 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Workstation Extension 15 is installed
AND Package Information
MozillaThunderbird-60.5.1-3.24 is installed
OR MozillaThunderbird-translations-common-60.5.1-3.24 is installed
OR MozillaThunderbird-translations-other-60.5.1-3.24 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Workstation Extension 15 SP1 is installed
AND Package Information
MozillaThunderbird-68.7.0-3.77 is installed
OR MozillaThunderbird-translations-common-68.7.0-3.77 is installed
OR MozillaThunderbird-translations-other-68.7.0-3.77 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 6 is installed
AND Package Information
python-keystoneclient-1.7.2-3 is installed
OR python-keystoneclient-doc-1.7.2-3 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 7 is installed
AND Package Information
storm-1.0.5-5 is installed
OR storm-nimbus-1.0.5-5 is installed
OR storm-supervisor-1.0.5-5 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 8 is installed
AND python-Twisted-15.2.1-9.5 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud Crowbar 8 is installed
AND Package Information
libssh2-1-1.4.3-20.9 is installed
OR libssh2-1-32bit-1.4.3-20.9 is installed
OR libssh2_org-1.4.3-20.9 is installed
|