Oval Definition:oval:org.opensuse.security:def:50573
Revision Date:2020-12-01Version:1
Title:Security update for libssh (Important)
Description:

This update for libssh fixes the following issues:

- CVE-2019-14889: Fixed an unwanted command execution in scp caused by unsanitized location (bsc#1158095).
Family:unixClass:patch
Status:Reference(s):1079730
1091764
1097375
1097401
1097404
1098403
1098946
1109412
1109413
1109414
1111025
1111996
1112534
1112535
1113247
1113252
1113255
1116827
1118644
1118830
1118831
1119115
1120640
1121034
1121035
1121056
1132091
1133131
1133191
1133232
1134883
1135902
1136446
1136540
1136778
1136935
1137597
1139959
1140402
1140750
1141844
1141913
1142772
1143794
1145095
1146360
1150011
1151793
1152590
1154016
1154025
1155419
1158095
1160471
1166844
1170441
1173466
1173467
1173469
1173942
1176012
1176382
1176896
CVE-2018-1000168
CVE-2018-1000876
CVE-2018-12648
CVE-2018-17358
CVE-2018-17359
CVE-2018-17360
CVE-2018-17985
CVE-2018-18309
CVE-2018-18483
CVE-2018-18484
CVE-2018-18605
CVE-2018-18606
CVE-2018-18607
CVE-2018-19931
CVE-2018-19932
CVE-2018-20623
CVE-2018-20651
CVE-2018-20671
CVE-2018-6323
CVE-2018-6543
CVE-2018-6759
CVE-2018-6872
CVE-2018-7161
CVE-2018-7167
CVE-2018-7208
CVE-2018-7568
CVE-2018-7569
CVE-2018-7570
CVE-2018-7642
CVE-2018-7643
CVE-2018-8945
CVE-2019-1010180
CVE-2019-11023
CVE-2019-11041
CVE-2019-11042
CVE-2019-11477
CVE-2019-11478
CVE-2019-11487
CVE-2019-12155
CVE-2019-13012
CVE-2019-13164
CVE-2019-13314
CVE-2019-13616
CVE-2019-14378
CVE-2019-14822
CVE-2019-14889
CVE-2019-15681
CVE-2019-15690
CVE-2019-20788
CVE-2019-3846
CVE-2020-0431
CVE-2020-10531
CVE-2020-11668
CVE-2020-14381
CVE-2020-15304
CVE-2020-15305
CVE-2020-15306
CVE-2020-25212
SUSE-SU-2018:1918-1
SUSE-SU-2019:1267-3
SUSE-SU-2019:1603-1
SUSE-SU-2019:1833-1
SUSE-SU-2019:2246-1
SUSE-SU-2019:2427-1
SUSE-SU-2019:2503-1
SUSE-SU-2019:2779-1
SUSE-SU-2020:0130-1
SUSE-SU-2020:0819-2
SUSE-SU-2020:1164-1
SUSE-SU-2020:3178-1
Platform(s):SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 11 SP4
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise Module for additional PackageHub packages 15
SUSE Linux Enterprise Module for Basesystem 15
SUSE Linux Enterprise Module for Basesystem 15 SP1
SUSE Linux Enterprise Module for Live Patching 15
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2
SUSE Linux Enterprise Module for Server Applications 15
SUSE Linux Enterprise Module for Server Applications 15 SP2
SUSE Linux Enterprise Module for Web Scripting 15
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP1-LTSS
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP2-BCL
SUSE Linux Enterprise Server 12 SP2-ESPOS
SUSE Linux Enterprise Server 12 SP2-LTSS
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-BCL
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server 15-LTSS
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Workstation Extension 15 SP1
SUSE OpenStack Cloud 6
SUSE OpenStack Cloud 7
SUSE OpenStack Cloud 8
SUSE OpenStack Cloud Crowbar 8
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP3 is installed
  • AND Package Information
  • MozillaFirefox-38.6.0esr-31 is installed
  • OR MozillaFirefox-branding-SLED-38-18 is installed
  • OR MozillaFirefox-translations-38.6.0esr-31 is installed
  • OR libfreebl3-3.20.2-25 is installed
  • OR libfreebl3-32bit-3.20.2-25 is installed
  • OR libsoftokn3-3.20.2-25 is installed
  • OR libsoftokn3-32bit-3.20.2-25 is installed
  • OR mozilla-nss-3.20.2-25 is installed
  • OR mozilla-nss-32bit-3.20.2-25 is installed
  • OR mozilla-nss-tools-3.20.2-25 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP4 is installed
  • AND Package Information
  • MozillaFirefox-38.3.0esr-22 is installed
  • OR MozillaFirefox-translations-38.3.0esr-22 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 is installed
  • AND coolkey-1.1.0-147 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP1 is installed
  • AND cvs-1.12.12-181 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP2 is installed
  • AND Package Information
  • aaa_base-13.2+git20140911.61c1681-28 is installed
  • OR aaa_base-extras-13.2+git20140911.61c1681-28 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • AND Package Information
  • DirectFB-1.7.1-6 is installed
  • OR lib++dfb-1_7-1-1.7.1-6 is installed
  • OR libdirectfb-1_7-1-1.7.1-6 is installed
  • OR libdirectfb-1_7-1-32bit-1.7.1-6 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP4 is installed
  • AND clamav-0.100.2-33.18 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for additional PackageHub packages 15 is installed
  • AND Package Information
  • php7-7.2.5-4.40 is installed
  • OR php7-embed-7.2.5-4.40 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Basesystem 15 is installed
  • AND Package Information
  • libssh-0.7.5-6.9 is installed
  • OR libssh-devel-0.7.5-6.9 is installed
  • OR libssh4-0.7.5-6.9 is installed
  • OR libssh4-32bit-0.7.5-6.9 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed
  • AND Package Information
  • glib2-2.54.3-4.18 is installed
  • OR glib2-devel-2.54.3-4.18 is installed
  • OR glib2-lang-2.54.3-4.18 is installed
  • OR glib2-tools-2.54.3-4.18 is installed
  • OR libgio-2_0-0-2.54.3-4.18 is installed
  • OR libgio-2_0-0-32bit-2.54.3-4.18 is installed
  • OR libglib-2_0-0-2.54.3-4.18 is installed
  • OR libglib-2_0-0-32bit-2.54.3-4.18 is installed
  • OR libgmodule-2_0-0-2.54.3-4.18 is installed
  • OR libgmodule-2_0-0-32bit-2.54.3-4.18 is installed
  • OR libgobject-2_0-0-2.54.3-4.18 is installed
  • OR libgobject-2_0-0-32bit-2.54.3-4.18 is installed
  • OR libgthread-2_0-0-2.54.3-4.18 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Live Patching 15 is installed
  • AND Package Information
  • kernel-livepatch-4_12_14-150_14-default-2-2 is installed
  • OR kernel-livepatch-SLE15_Update_9-2-2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed
  • AND Package Information
  • exempi-2.4.5-3.3 is installed
  • OR exempi-tools-2.4.5-3.3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 is installed
  • AND Package Information
  • SDL-1.2.15-3.12 is installed
  • OR libSDL-1_2-0-32bit-1.2.15-3.12 is installed
  • OR libSDL-devel-32bit-1.2.15-3.12 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Server Applications 15 is installed
  • AND Package Information
  • qemu-2.11.2-9.28 is installed
  • OR qemu-arm-2.11.2-9.28 is installed
  • OR qemu-block-curl-2.11.2-9.28 is installed
  • OR qemu-block-iscsi-2.11.2-9.28 is installed
  • OR qemu-block-rbd-2.11.2-9.28 is installed
  • OR qemu-block-ssh-2.11.2-9.28 is installed
  • OR qemu-guest-agent-2.11.2-9.28 is installed
  • OR qemu-ipxe-1.0.0+-9.28 is installed
  • OR qemu-kvm-2.11.2-9.28 is installed
  • OR qemu-lang-2.11.2-9.28 is installed
  • OR qemu-ppc-2.11.2-9.28 is installed
  • OR qemu-s390-2.11.2-9.28 is installed
  • OR qemu-seabios-1.11.0-9.28 is installed
  • OR qemu-sgabios-8-9.28 is installed
  • OR qemu-vgabios-1.11.0-9.28 is installed
  • OR qemu-x86-2.11.2-9.28 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Server Applications 15 SP2 is installed
  • AND Package Information
  • graphviz-addons-2.40.1-6.3 is installed
  • OR graphviz-tcl-2.40.1-6.3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Web Scripting 15 is installed
  • AND Package Information
  • nodejs8-8.11.3-3.5 is installed
  • OR nodejs8-devel-8.11.3-3.5 is installed
  • OR nodejs8-docs-8.11.3-3.5 is installed
  • OR npm8-8.11.3-3.5 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1 is installed
  • AND coolkey-1.1.0-147 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1-LTSS is installed
  • AND Package Information
  • java-1_8_0-ibm-1.8.0_sr5.5-30.13 is installed
  • OR java-1_8_0-ibm-alsa-1.8.0_sr5.5-30.13 is installed
  • OR java-1_8_0-ibm-devel-1.8.0_sr5.5-30.13 is installed
  • OR java-1_8_0-ibm-plugin-1.8.0_sr5.5-30.13 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2 is installed
  • AND Package Information
  • DirectFB-1.7.1-6 is installed
  • OR lib++dfb-1_7-1-1.7.1-6 is installed
  • OR libdirectfb-1_7-1-1.7.1-6 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-BCL is installed
  • AND Package Information
  • libvirt-2.0.0-27.45 is installed
  • OR libvirt-client-2.0.0-27.45 is installed
  • OR libvirt-daemon-2.0.0-27.45 is installed
  • OR libvirt-daemon-config-network-2.0.0-27.45 is installed
  • OR libvirt-daemon-config-nwfilter-2.0.0-27.45 is installed
  • OR libvirt-daemon-driver-interface-2.0.0-27.45 is installed
  • OR libvirt-daemon-driver-libxl-2.0.0-27.45 is installed
  • OR libvirt-daemon-driver-lxc-2.0.0-27.45 is installed
  • OR libvirt-daemon-driver-network-2.0.0-27.45 is installed
  • OR libvirt-daemon-driver-nodedev-2.0.0-27.45 is installed
  • OR libvirt-daemon-driver-nwfilter-2.0.0-27.45 is installed
  • OR libvirt-daemon-driver-qemu-2.0.0-27.45 is installed
  • OR libvirt-daemon-driver-secret-2.0.0-27.45 is installed
  • OR libvirt-daemon-driver-storage-2.0.0-27.45 is installed
  • OR libvirt-daemon-hooks-2.0.0-27.45 is installed
  • OR libvirt-daemon-lxc-2.0.0-27.45 is installed
  • OR libvirt-daemon-qemu-2.0.0-27.45 is installed
  • OR libvirt-daemon-xen-2.0.0-27.45 is installed
  • OR libvirt-doc-2.0.0-27.45 is installed
  • OR libvirt-lock-sanlock-2.0.0-27.45 is installed
  • OR libvirt-nss-2.0.0-27.45 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
  • AND ucode-intel-20180703-13.25 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-LTSS is installed
  • AND Package Information
  • kgraft-patch-4_4_90-92_45-default-7-2 is installed
  • OR kgraft-patch-SLE12-SP2_Update_14-7-2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND Package Information
  • fetchmail-6.3.26-12 is installed
  • OR fetchmailconf-6.3.26-12 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-BCL is installed
  • AND Package Information
  • libmysqlclient18-10.0.40.2-29.35 is installed
  • OR libmysqlclient18-32bit-10.0.40.2-29.35 is installed
  • OR mariadb-10.0.40.2-29.35 is installed
  • OR mariadb-client-10.0.40.2-29.35 is installed
  • OR mariadb-errormessages-10.0.40.2-29.35 is installed
  • OR mariadb-tools-10.0.40.2-29.35 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-LTSS is installed
  • AND Package Information
  • kgraft-patch-4_4_180-94_97-default-5-2 is installed
  • OR kgraft-patch-SLE12-SP3_Update_26-5-2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
  • AND Package Information
  • rsyslog-8.24.0-3.7 is installed
  • OR rsyslog-diag-tools-8.24.0-3.7 is installed
  • OR rsyslog-doc-8.24.0-3.7 is installed
  • OR rsyslog-module-gssapi-8.24.0-3.7 is installed
  • OR rsyslog-module-gtls-8.24.0-3.7 is installed
  • OR rsyslog-module-mysql-8.24.0-3.7 is installed
  • OR rsyslog-module-pgsql-8.24.0-3.7 is installed
  • OR rsyslog-module-relp-8.24.0-3.7 is installed
  • OR rsyslog-module-snmp-8.24.0-3.7 is installed
  • OR rsyslog-module-udpspoof-8.24.0-3.7 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND Package Information
  • accountsservice-0.6.42-16.3 is installed
  • OR accountsservice-lang-0.6.42-16.3 is installed
  • OR libaccountsservice0-0.6.42-16.3 is installed
  • OR typelib-1_0-AccountsService-1_0-0.6.42-16.3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 15-LTSS is installed
  • AND Package Information
  • wicked-0.6.60-3.21 is installed
  • OR wicked-service-0.6.60-3.21 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server for SAP Applications 15 is installed
  • AND Package Information
  • dpdk-18.11.3-3.19 is installed
  • OR dpdk-devel-18.11.3-3.19 is installed
  • OR dpdk-kmp-default-18.11.3_k4.12.14_150.47-3.19 is installed
  • OR dpdk-tools-18.11.3-3.19 is installed
  • OR libdpdk-18_11-18.11.3-3.19 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 15 SP1 is installed
  • AND transfig-3.2.6a-4.9 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud 6 is installed
  • AND ruby2.1-rubygem-bson-1_11-1.11.1-2 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud 7 is installed
  • AND Package Information
  • res-signingkeys-3.0.38-52.26 is installed
  • OR smt-3.0.38-52.26 is installed
  • OR smt-support-3.0.38-52.26 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud 8 is installed
  • AND ansible-2.4.6.0-3.6 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud Crowbar 8 is installed
  • AND python-Django-1.11.23-3.12 is installed
  • BACK