Oval Definition:oval:org.opensuse.security:def:50507
Revision Date:2020-12-01Version:1
Title:Security update for strongswan (Important)
Description:

This update for strongswan fixes the following issues:

Security issues fixed:

- CVE-2018-5388: Fixed a buffer underflow which may allow to a remote attacker with local user credentials to resource exhaustion and denial of service while reading from the socket (bsc#1094462). - CVE-2018-10811: Fixed a denial of service during the IKEv2 key derivation if the openssl plugin is used in FIPS mode and HMAC-MD5 is negotiated as PRF (bsc#1093536). - CVE-2018-16151,CVE-2018-16152: Fixed multiple flaws in the gmp plugin which might lead to authorization bypass (bsc#1107874). - CVE-2018-17540: Fixed an improper input validation in gmp plugin (bsc#1109845).
Family:unixClass:patch
Status:Reference(s):1027519
1093536
1094462
1096945
1100691
1107874
1109845
1121567
1123360
1124957
1125080
1125899
1131493
1131984
1132396
1133035
1133139
1133283
1133461
1134978
1135030
1135219
1135221
1135388
1136110
1137825
1141320
1149841
1151021
1152497
1154448
1154456
1154458
1154460
1154461
1154464
1155945
1157490
1158095
1159819
1160850
1160852
1160888
1167007
1168326
1168352
1169746
1171978
1172205
1172698
1172704
1173942
1173963
1174186
1174247
1175686
CVE-2018-1000622
CVE-2018-10811
CVE-2018-12207
CVE-2018-16151
CVE-2018-16152
CVE-2018-16889
CVE-2018-17540
CVE-2018-5388
CVE-2019-11135
CVE-2019-12083
CVE-2019-12387
CVE-2019-14835
CVE-2019-14889
CVE-2019-14902
CVE-2019-14907
CVE-2019-17006
CVE-2019-18420
CVE-2019-18421
CVE-2019-18422
CVE-2019-18423
CVE-2019-18424
CVE-2019-18425
CVE-2019-19344
CVE-2019-3821
CVE-2019-3902
CVE-2019-5953
CVE-2019-9458
CVE-2020-0543
CVE-2020-11668
CVE-2020-12399
CVE-2020-14331
CVE-2020-15663
CVE-2020-15664
CVE-2020-15669
CVE-2020-15780
CVE-2020-7064
CVE-2020-7066
CVE-2020-8023
SUSE-SU-2019:0925-1
SUSE-SU-2019:1731-1
SUSE-SU-2019:2049-1
SUSE-SU-2019:2755-1
SUSE-SU-2019:2961-1
SUSE-SU-2019:3056-1
SUSE-SU-2020:0130-1
SUSE-SU-2020:0223-1
SUSE-SU-2020:1199-1
SUSE-SU-2020:1609-1
SUSE-SU-2020:1677-1
SUSE-SU-2020:1709-2
SUSE-SU-2020:1856-1
SUSE-SU-2020:2531-1
Platform(s):SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 11 SP4
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise Module for Basesystem 15
SUSE Linux Enterprise Module for Legacy Software 15 SP1
SUSE Linux Enterprise Module for Live Patching 15
SUSE Linux Enterprise Module for Live Patching 15 SP1
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2
SUSE Linux Enterprise Module for Python2 packages 15 SP2
SUSE Linux Enterprise Module for Server Applications 15 SP1
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP1-LTSS
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP2-BCL
SUSE Linux Enterprise Server 12 SP2-ESPOS
SUSE Linux Enterprise Server 12 SP2-LTSS
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-ESPOS
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 15-LTSS
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Workstation Extension 15
SUSE Linux Enterprise Workstation Extension 15 SP1
SUSE Linux Enterprise Workstation Extension 15 SP2
SUSE OpenStack Cloud 6
SUSE OpenStack Cloud 7
SUSE OpenStack Cloud 8
SUSE OpenStack Cloud Crowbar 8
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP3 is installed
  • AND Package Information
  • kde4-l10n-ar-4.3.5-0.3 is installed
  • OR kde4-l10n-cs-4.3.5-0.3 is installed
  • OR kde4-l10n-da-4.3.5-0.3 is installed
  • OR kde4-l10n-da-data-4.3.5-0.3 is installed
  • OR kde4-l10n-da-doc-4.3.5-0.3 is installed
  • OR kde4-l10n-de-4.3.5-0.3 is installed
  • OR kde4-l10n-de-data-4.3.5-0.3 is installed
  • OR kde4-l10n-de-doc-4.3.5-0.3 is installed
  • OR kde4-l10n-en_GB-4.3.5-0.3 is installed
  • OR kde4-l10n-es-4.3.5-0.3 is installed
  • OR kde4-l10n-es-data-4.3.5-0.3 is installed
  • OR kde4-l10n-es-doc-4.3.5-0.3 is installed
  • OR kde4-l10n-fr-4.3.5-0.3 is installed
  • OR kde4-l10n-fr-data-4.3.5-0.3 is installed
  • OR kde4-l10n-fr-doc-4.3.5-0.3 is installed
  • OR kde4-l10n-hu-4.3.5-0.3 is installed
  • OR kde4-l10n-it-4.3.5-0.3 is installed
  • OR kde4-l10n-it-data-4.3.5-0.3 is installed
  • OR kde4-l10n-it-doc-4.3.5-0.3 is installed
  • OR kde4-l10n-ja-4.3.5-0.3 is installed
  • OR kde4-l10n-ko-4.3.5-0.3 is installed
  • OR kde4-l10n-nb-4.3.5-0.3 is installed
  • OR kde4-l10n-nl-4.3.5-0.3 is installed
  • OR kde4-l10n-nl-data-4.3.5-0.3 is installed
  • OR kde4-l10n-nl-doc-4.3.5-0.3 is installed
  • OR kde4-l10n-pl-4.3.5-0.3 is installed
  • OR kde4-l10n-pl-data-4.3.5-0.3 is installed
  • OR kde4-l10n-pl-doc-4.3.5-0.3 is installed
  • OR kde4-l10n-pt-4.3.5-0.3 is installed
  • OR kde4-l10n-pt_BR-4.3.5-0.3 is installed
  • OR kde4-l10n-pt_BR-data-4.3.5-0.3 is installed
  • OR kde4-l10n-pt_BR-doc-4.3.5-0.3 is installed
  • OR kde4-l10n-ru-4.3.5-0.3 is installed
  • OR kde4-l10n-ru-data-4.3.5-0.3 is installed
  • OR kde4-l10n-ru-doc-4.3.5-0.3 is installed
  • OR kde4-l10n-sv-4.3.5-0.3 is installed
  • OR kde4-l10n-sv-data-4.3.5-0.3 is installed
  • OR kde4-l10n-sv-doc-4.3.5-0.3 is installed
  • OR kde4-l10n-zh_CN-4.3.5-0.3 is installed
  • OR kde4-l10n-zh_TW-4.3.5-0.3 is installed
  • OR kdebase4-runtime-4.3.5-0.3 is installed
  • OR kdebase4-runtime-xine-4.3.5-0.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP4 is installed
  • AND Package Information
  • MozillaFirefox-38.4.0esr-25 is installed
  • OR MozillaFirefox-branding-SLED-38-15 is installed
  • OR MozillaFirefox-translations-38.4.0esr-25 is installed
  • OR libfreebl3-3.19.2.1-19 is installed
  • OR libfreebl3-32bit-3.19.2.1-19 is installed
  • OR libsoftokn3-3.19.2.1-19 is installed
  • OR libsoftokn3-32bit-3.19.2.1-19 is installed
  • OR mozilla-nspr-4.10.10-16 is installed
  • OR mozilla-nspr-32bit-4.10.10-16 is installed
  • OR mozilla-nss-3.19.2.1-19 is installed
  • OR mozilla-nss-32bit-3.19.2.1-19 is installed
  • OR mozilla-nss-tools-3.19.2.1-19 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 is installed
  • AND Package Information
  • cpp48-4.8.3+r212056-6 is installed
  • OR gcc48-4.8.3+r212056-6 is installed
  • OR gcc48-32bit-4.8.3+r212056-6 is installed
  • OR gcc48-c++-4.8.3+r212056-6 is installed
  • OR gcc48-gij-4.8.3+r212056-6 is installed
  • OR gcc48-gij-32bit-4.8.3+r212056-6 is installed
  • OR gcc48-info-4.8.3+r212056-6 is installed
  • OR libasan0-4.8.3+r212056-6 is installed
  • OR libasan0-32bit-4.8.3+r212056-6 is installed
  • OR libatomic1-4.8.3+r212056-6 is installed
  • OR libatomic1-32bit-4.8.3+r212056-6 is installed
  • OR libffi4-4.8.3+r212056-6 is installed
  • OR libffi4-32bit-4.8.3+r212056-6 is installed
  • OR libgcc_s1-4.8.3+r212056-6 is installed
  • OR libgcc_s1-32bit-4.8.3+r212056-6 is installed
  • OR libgcj48-4.8.3+r212056-6 is installed
  • OR libgcj48-32bit-4.8.3+r212056-6 is installed
  • OR libgcj48-jar-4.8.3+r212056-6 is installed
  • OR libgcj_bc1-4.8.3+r212056-6 is installed
  • OR libgfortran3-4.8.3+r212056-6 is installed
  • OR libgomp1-4.8.3+r212056-6 is installed
  • OR libgomp1-32bit-4.8.3+r212056-6 is installed
  • OR libitm1-4.8.3+r212056-6 is installed
  • OR libitm1-32bit-4.8.3+r212056-6 is installed
  • OR libquadmath0-4.8.3+r212056-6 is installed
  • OR libstdc++48-devel-4.8.3+r212056-6 is installed
  • OR libstdc++48-devel-32bit-4.8.3+r212056-6 is installed
  • OR libstdc++6-4.8.3+r212056-6 is installed
  • OR libstdc++6-32bit-4.8.3+r212056-6 is installed
  • OR libtsan0-4.8.3+r212056-6 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP1 is installed
  • AND Package Information
  • gnome-settings-daemon-3.10.2-20 is installed
  • OR gnome-settings-daemon-lang-3.10.2-20 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP2 is installed
  • AND Package Information
  • at-3.1.14-7 is installed
  • OR libQtWebKit4-4.8.6+2.3.3-3 is installed
  • OR libQtWebKit4-32bit-4.8.6+2.3.3-3 is installed
  • OR libbonobo-2.32.1-16 is installed
  • OR libbonobo-32bit-2.32.1-16 is installed
  • OR libbonobo-lang-2.32.1-16 is installed
  • OR libkde4-4.12.0-7 is installed
  • OR libkde4-32bit-4.12.0-7 is installed
  • OR libkdecore4-4.12.0-7 is installed
  • OR libkdecore4-32bit-4.12.0-7 is installed
  • OR libksuseinstall1-4.12.0-7 is installed
  • OR libksuseinstall1-32bit-4.12.0-7 is installed
  • OR libnetpbm11-10.66.3-4 is installed
  • OR libnetpbm11-32bit-10.66.3-4 is installed
  • OR netpbm-10.66.3-4 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • AND Package Information
  • ecryptfs-utils-103-7 is installed
  • OR ecryptfs-utils-32bit-103-7 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP4 is installed
  • AND Package Information
  • libXxf86vm1-1.1.3-3 is installed
  • OR libXxf86vm1-32bit-1.1.3-3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Basesystem 15 is installed
  • AND Package Information
  • strongswan-5.6.0-4.3 is installed
  • OR strongswan-doc-5.6.0-4.3 is installed
  • OR strongswan-hmac-5.6.0-4.3 is installed
  • OR strongswan-ipsec-5.6.0-4.3 is installed
  • OR strongswan-libs0-5.6.0-4.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Legacy Software 15 SP1 is installed
  • AND Package Information
  • openldap2-2.4.46-9.31 is installed
  • OR openldap2-back-meta-2.4.46-9.31 is installed
  • OR openldap2-back-perl-2.4.46-9.31 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Live Patching 15 is installed
  • AND Package Information
  • kernel-livepatch-4_12_14-25_28-default-5-2 is installed
  • OR kernel-livepatch-SLE15_Update_8-5-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed
  • AND Package Information
  • kernel-livepatch-4_12_14-197_34-default-5-2 is installed
  • OR kernel-livepatch-SLE15-SP1_Update_9-5-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 is installed
  • AND Package Information
  • libssh-0.7.5-6.9 is installed
  • OR libssh-devel-doc-0.7.5-6.9 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed
  • AND Package Information
  • python-Twisted-17.9.0-3.3 is installed
  • OR python-Twisted-doc-17.9.0-3.3 is installed
  • OR python2-Twisted-17.9.0-3.3 is installed
  • OR python3-Twisted-17.9.0-3.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 is installed
  • AND Package Information
  • MozillaThunderbird-68.12.0-3.94 is installed
  • OR MozillaThunderbird-translations-common-68.12.0-3.94 is installed
  • OR MozillaThunderbird-translations-other-68.12.0-3.94 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Python2 packages 15 SP2 is installed
  • AND mercurial-4.5.2-3.9 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed
  • AND Package Information
  • xen-4.12.1_04-3.6 is installed
  • OR xen-devel-4.12.1_04-3.6 is installed
  • OR xen-tools-4.12.1_04-3.6 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1 is installed
  • AND syslog-service-2.0-778 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1-LTSS is installed
  • AND Package Information
  • MozillaFirefox-52.4.0esr-109.6 is installed
  • OR MozillaFirefox-devel-52.4.0esr-109.6 is installed
  • OR MozillaFirefox-translations-52.4.0esr-109.6 is installed
  • OR libfreebl3-3.29.5-58.3 is installed
  • OR libfreebl3-32bit-3.29.5-58.3 is installed
  • OR libfreebl3-hmac-3.29.5-58.3 is installed
  • OR libfreebl3-hmac-32bit-3.29.5-58.3 is installed
  • OR libsoftokn3-3.29.5-58.3 is installed
  • OR libsoftokn3-32bit-3.29.5-58.3 is installed
  • OR libsoftokn3-hmac-3.29.5-58.3 is installed
  • OR libsoftokn3-hmac-32bit-3.29.5-58.3 is installed
  • OR mozilla-nss-3.29.5-58.3 is installed
  • OR mozilla-nss-32bit-3.29.5-58.3 is installed
  • OR mozilla-nss-certs-3.29.5-58.3 is installed
  • OR mozilla-nss-certs-32bit-3.29.5-58.3 is installed
  • OR mozilla-nss-devel-3.29.5-58.3 is installed
  • OR mozilla-nss-sysinit-3.29.5-58.3 is installed
  • OR mozilla-nss-sysinit-32bit-3.29.5-58.3 is installed
  • OR mozilla-nss-tools-3.29.5-58.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2 is installed
  • AND Package Information
  • at-3.1.14-7 is installed
  • OR flex-2.5.37-8 is installed
  • OR flex-32bit-2.5.37-8 is installed
  • OR libQtWebKit4-4.8.6+2.3.3-3 is installed
  • OR libQtWebKit4-32bit-4.8.6+2.3.3-3 is installed
  • OR libbonobo-2.32.1-16 is installed
  • OR libbonobo-32bit-2.32.1-16 is installed
  • OR libbonobo-doc-2.32.1-16 is installed
  • OR libbonobo-lang-2.32.1-16 is installed
  • OR libkde4-4.12.0-7 is installed
  • OR libkde4-32bit-4.12.0-7 is installed
  • OR libkdecore4-4.12.0-7 is installed
  • OR libkdecore4-32bit-4.12.0-7 is installed
  • OR libksuseinstall1-4.12.0-7 is installed
  • OR libksuseinstall1-32bit-4.12.0-7 is installed
  • OR libnetpbm11-10.66.3-4 is installed
  • OR libnetpbm11-32bit-10.66.3-4 is installed
  • OR netpbm-10.66.3-4 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-BCL is installed
  • AND Package Information
  • kernel-default-4.4.121-92.85 is installed
  • OR kernel-default-base-4.4.121-92.85 is installed
  • OR kernel-default-devel-4.4.121-92.85 is installed
  • OR kernel-devel-4.4.121-92.85 is installed
  • OR kernel-macros-4.4.121-92.85 is installed
  • OR kernel-source-4.4.121-92.85 is installed
  • OR kernel-syms-4.4.121-92.85 is installed
  • OR kgraft-patch-4_4_121-92_85-default-1-3.5 is installed
  • OR kgraft-patch-SLE12-SP2_Update_23-1-3.5 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
  • AND Package Information
  • libopenssl-devel-1.0.2j-60.39 is installed
  • OR libopenssl1_0_0-1.0.2j-60.39 is installed
  • OR libopenssl1_0_0-32bit-1.0.2j-60.39 is installed
  • OR libopenssl1_0_0-hmac-1.0.2j-60.39 is installed
  • OR libopenssl1_0_0-hmac-32bit-1.0.2j-60.39 is installed
  • OR openssl-1.0.2j-60.39 is installed
  • OR openssl-doc-1.0.2j-60.39 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-LTSS is installed
  • AND Package Information
  • postgresql94-9.4.19-21.22 is installed
  • OR postgresql94-contrib-9.4.19-21.22 is installed
  • OR postgresql94-docs-9.4.19-21.22 is installed
  • OR postgresql94-server-9.4.19-21.22 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND Package Information
  • libhogweed2-2.7.1-12 is installed
  • OR libhogweed2-32bit-2.7.1-12 is installed
  • OR libnettle4-2.7.1-12 is installed
  • OR libnettle4-32bit-2.7.1-12 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-ESPOS is installed
  • AND Package Information
  • kgraft-patch-4_4_175-94_79-default-5-2 is installed
  • OR kgraft-patch-SLE12-SP3_Update_23-5-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-LTSS is installed
  • AND Package Information
  • kgraft-patch-4_4_140-94_42-default-10-2 is installed
  • OR kgraft-patch-SLE12-SP3_Update_15-10-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
  • AND mailman-2.1.17-3.11 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 15-LTSS is installed
  • AND Package Information
  • ghostscript-9.52-3.27 is installed
  • OR ghostscript-devel-9.52-3.27 is installed
  • OR ghostscript-x11-9.52-3.27 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server for SAP Applications 15 is installed
  • AND Package Information
  • libzstd1-1.4.4-1.3 is installed
  • OR libzstd1-32bit-1.4.4-1.3 is installed
  • OR zstd-1.4.4-1.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 15 is installed
  • AND Package Information
  • kernel-default-4.12.14-150.14 is installed
  • OR kernel-default-extra-4.12.14-150.14 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 15 SP1 is installed
  • AND Package Information
  • openconnect-7.08-6.6 is installed
  • OR openconnect-devel-7.08-6.6 is installed
  • OR openconnect-lang-7.08-6.6 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 15 SP2 is installed
  • AND Package Information
  • libopencv3_3-3.3.1-6.6 is installed
  • OR opencv-3.3.1-6.6 is installed
  • OR opencv-devel-3.3.1-6.6 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud 6 is installed
  • AND apache2-mod_wsgi-4.4.13-1 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud 7 is installed
  • AND Package Information
  • openstack-nova-14.0.10~dev13-4.11 is installed
  • OR openstack-nova-api-14.0.10~dev13-4.11 is installed
  • OR openstack-nova-cells-14.0.10~dev13-4.11 is installed
  • OR openstack-nova-cert-14.0.10~dev13-4.11 is installed
  • OR openstack-nova-compute-14.0.10~dev13-4.11 is installed
  • OR openstack-nova-conductor-14.0.10~dev13-4.11 is installed
  • OR openstack-nova-console-14.0.10~dev13-4.11 is installed
  • OR openstack-nova-consoleauth-14.0.10~dev13-4.11 is installed
  • OR openstack-nova-doc-14.0.10~dev13-4.11 is installed
  • OR openstack-nova-novncproxy-14.0.10~dev13-4.11 is installed
  • OR openstack-nova-placement-api-14.0.10~dev13-4.11 is installed
  • OR openstack-nova-scheduler-14.0.10~dev13-4.11 is installed
  • OR openstack-nova-serialproxy-14.0.10~dev13-4.11 is installed
  • OR openstack-nova-vncproxy-14.0.10~dev13-4.11 is installed
  • OR python-nova-14.0.10~dev13-4.11 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud 8 is installed
  • AND Package Information
  • java-1_8_0-openjdk-1.8.0.222-27.35 is installed
  • OR java-1_8_0-openjdk-demo-1.8.0.222-27.35 is installed
  • OR java-1_8_0-openjdk-devel-1.8.0.222-27.35 is installed
  • OR java-1_8_0-openjdk-headless-1.8.0.222-27.35 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud Crowbar 8 is installed
  • AND python-Django-1.11.23-3.12 is installed
    • BACK