Oval Definition:oval:org.opensuse.security:def:50685
Revision Date:2020-12-01Version:1
Title:Security update for zziplib (Moderate)
Description:

This update for zziplib fixes the following issues:

Security issue fixed: - CVE-2018-16548: Prevented memory leak from __zzip_parse_root_directory(). Free allocated structure if its address is not passed back. (bsc#1107424)

Other issue addressed: - Prevented a division by zero (bsc#1129403).
Family:unixClass:patch
Status:Reference(s):1051510
1065729
1071995
1082318
1085030
1100369
1107424
1109160
1111666
1112178
1113956
1114279
1118367
1118368
1125401
1128220
1129403
1133297
1133375
1144333
1148868
1150660
1151927
1152624
1153165
1154217
1156205
1157051
1158095
1158983
1159058
1159913
1160968
1161016
1161168
1162002
1162063
1163309
1165631
1166985
1167104
1168081
1168959
1169194
1169511
1169514
1169740
1169771
1169795
1170011
1170442
1170592
1170617
1170618
1170667
1170713
1171124
1171313
1171352
1171355
1171424
1171529
1171530
1171558
1171732
1171739
1171740
1171743
1171753
1171759
1171835
1171841
1171868
1171904
1172247
1172257
1172277
1172344
1172458
1172484
1172537
1172538
1172643
1172651
1172687
1172719
1172759
1172775
1172781
1172782
1172783
1172871
1172872
1172958
1172999
1173060
1173074
1173146
1173265
1173274
1173280
1173284
1173307
1173311
1173334
1173428
1173514
1173567
1173573
1173746
1173786
1173818
1173820
1173825
1173826
1173833
1173838
1173839
1173845
1173857
1173983
1174010
1174113
1174115
1174122
1174123
1174186
1174187
1174296
1174343
1174356
1174409
1174438
1174462
1174543
1175223
1175443
1176092
1176674
1178512
906079
992038
CVE-2017-3136
CVE-2018-16548
CVE-2018-5741
CVE-2018-8956
CVE-2018-8956
CVE-2019-14853
CVE-2019-14859
CVE-2019-14889
CVE-2019-20810
CVE-2019-20908
CVE-2019-2949
CVE-2019-5108
CVE-2019-6477
CVE-2019-9928
CVE-2020-0305
CVE-2020-10759
CVE-2020-10766
CVE-2020-10767
CVE-2020-10768
CVE-2020-10769
CVE-2020-10773
CVE-2020-10781
CVE-2020-11868
CVE-2020-11868
CVE-2020-12771
CVE-2020-12888
CVE-2020-13817
CVE-2020-13817
CVE-2020-13974
CVE-2020-14416
CVE-2020-14422
CVE-2020-15025
CVE-2020-15025
CVE-2020-15393
CVE-2020-15780
CVE-2020-1749
CVE-2020-2654
CVE-2020-2754
CVE-2020-2755
CVE-2020-2756
CVE-2020-2757
CVE-2020-2781
CVE-2020-2800
CVE-2020-2803
CVE-2020-2805
CVE-2020-28196
CVE-2020-2830
CVE-2020-7068
CVE-2020-8616
CVE-2020-8617
CVE-2020-8618
CVE-2020-8619
CVE-2020-8620
CVE-2020-8621
CVE-2020-8622
CVE-2020-8623
CVE-2020-8624
SUSE-SU-2019:2750-1
SUSE-SU-2019:2891-1
SUSE-SU-2020:0129-1
SUSE-SU-2020:0891-1
SUSE-SU-2020:1300-1
SUSE-SU-2020:1396-2
SUSE-SU-2020:1684-1
SUSE-SU-2020:1822-1
SUSE-SU-2020:1823-1
SUSE-SU-2020:2103-1
SUSE-SU-2020:2914-1
Platform(s):SUSE Linux Enterprise Desktop 11 SP4
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise Module for Basesystem 15 SP1
SUSE Linux Enterprise Module for Legacy Software 15 SP2
SUSE Linux Enterprise Module for Live Patching 15
SUSE Linux Enterprise Module for Live Patching 15 SP1
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2
SUSE Linux Enterprise Module for Public Cloud 15 SP1
SUSE Linux Enterprise Module for Server Applications 15 SP1
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP1-LTSS
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP2-BCL
SUSE Linux Enterprise Server 12 SP2-ESPOS
SUSE Linux Enterprise Server 12 SP2-LTSS
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-BCL
SUSE Linux Enterprise Server 12 SP3-ESPOS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server 15-LTSS
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Workstation Extension 15
SUSE Linux Enterprise Workstation Extension 15 SP1
SUSE OpenStack Cloud 6
SUSE OpenStack Cloud 7
SUSE OpenStack Cloud 8
SUSE OpenStack Cloud Crowbar 8
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP4 is installed
  • AND Package Information
  • MozillaFirefox-38.4.0esr-25 is installed
  • OR MozillaFirefox-branding-SLED-38-15 is installed
  • OR MozillaFirefox-translations-38.4.0esr-25 is installed
  • OR libfreebl3-3.19.2.1-19 is installed
  • OR libfreebl3-32bit-3.19.2.1-19 is installed
  • OR libsoftokn3-3.19.2.1-19 is installed
  • OR libsoftokn3-32bit-3.19.2.1-19 is installed
  • OR mozilla-nspr-4.10.10-16 is installed
  • OR mozilla-nspr-32bit-4.10.10-16 is installed
  • OR mozilla-nss-3.19.2.1-19 is installed
  • OR mozilla-nss-32bit-3.19.2.1-19 is installed
  • OR mozilla-nss-tools-3.19.2.1-19 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 is installed
  • AND Package Information
  • libXp6-1.0.2-3 is installed
  • OR libXp6-32bit-1.0.2-3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP1 is installed
  • AND Package Information
  • libXv1-1.0.10-3 is installed
  • OR libXv1-32bit-1.0.10-3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP2 is installed
  • AND autofs-5.0.9-21 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • AND Package Information
  • emacs-24.3-19 is installed
  • OR emacs-info-24.3-19 is installed
  • OR emacs-x11-24.3-19 is installed
  • OR etags-24.3-19 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP4 is installed
  • AND coolkey-1.1.0-148.3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed
  • AND Package Information
  • libzzip-0-13-0.13.69-3.10 is installed
  • OR zziplib-0.13.69-3.10 is installed
  • OR zziplib-devel-0.13.69-3.10 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Legacy Software 15 SP2 is installed
  • AND Package Information
  • java-1_8_0-ibm-1.8.0_sr6.10-3.38 is installed
  • OR java-1_8_0-ibm-alsa-1.8.0_sr6.10-3.38 is installed
  • OR java-1_8_0-ibm-devel-1.8.0_sr6.10-3.38 is installed
  • OR java-1_8_0-ibm-plugin-1.8.0_sr6.10-3.38 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Live Patching 15 is installed
  • AND Package Information
  • kernel-livepatch-4_12_14-150_32-default-6-2 is installed
  • OR kernel-livepatch-SLE15_Update_13-6-2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed
  • AND Package Information
  • kernel-livepatch-4_12_14-197_34-default-2-2 is installed
  • OR kernel-livepatch-SLE15-SP1_Update_9-2-2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed
  • AND Package Information
  • python-ecdsa-0.13.3-3.3 is installed
  • OR python2-ecdsa-0.13.3-3.3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 is installed
  • AND Package Information
  • ntp-4.2.8p15-4.10 is installed
  • OR ntp-doc-4.2.8p15-4.10 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed
  • AND Package Information
  • kernel-azure-4.12.14-8.38 is installed
  • OR kernel-azure-base-4.12.14-8.38 is installed
  • OR kernel-azure-devel-4.12.14-8.38 is installed
  • OR kernel-devel-azure-4.12.14-8.38 is installed
  • OR kernel-source-azure-4.12.14-8.38 is installed
  • OR kernel-syms-azure-4.12.14-8.38 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed
  • AND Package Information
  • bind-9.16.6-12.32 is installed
  • OR bind-chrootenv-9.16.6-12.32 is installed
  • OR bind-doc-9.16.6-12.32 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1 is installed
  • AND Package Information
  • augeas-1.2.0-3 is installed
  • OR augeas-lenses-1.2.0-3 is installed
  • OR libaugeas0-1.2.0-3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1-LTSS is installed
  • AND Package Information
  • xen-4.5.5_16-22.28 is installed
  • OR xen-doc-html-4.5.5_16-22.28 is installed
  • OR xen-kmp-default-4.5.5_16_k3.12.74_60.64.57-22.28 is installed
  • OR xen-libs-4.5.5_16-22.28 is installed
  • OR xen-libs-32bit-4.5.5_16-22.28 is installed
  • OR xen-tools-4.5.5_16-22.28 is installed
  • OR xen-tools-domU-4.5.5_16-22.28 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2 is installed
  • AND libXfont1-1.5.1-10 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-BCL is installed
  • AND Package Information
  • java-1_7_0-openjdk-1.7.0.181-43.15 is installed
  • OR java-1_7_0-openjdk-demo-1.7.0.181-43.15 is installed
  • OR java-1_7_0-openjdk-devel-1.7.0.181-43.15 is installed
  • OR java-1_7_0-openjdk-headless-1.7.0.181-43.15 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
  • AND Package Information
  • kgraft-patch-4_4_120-92_70-default-7-2 is installed
  • OR kgraft-patch-SLE12-SP2_Update_20-7-2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-LTSS is installed
  • AND Package Information
  • kgraft-patch-4_4_74-92_29-default-12-2 is installed
  • OR kgraft-patch-SLE12-SP2_Update_10-12-2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND Package Information
  • bash-4.3-82 is installed
  • OR bash-doc-4.3-82 is installed
  • OR libreadline6-6.3-82 is installed
  • OR libreadline6-32bit-6.3-82 is installed
  • OR readline-doc-6.3-82 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-BCL is installed
  • AND Package Information
  • ibus-1.5.13-15.11 is installed
  • OR ibus-gtk-1.5.13-15.11 is installed
  • OR ibus-gtk3-1.5.13-15.11 is installed
  • OR ibus-lang-1.5.13-15.11 is installed
  • OR libibus-1_0-5-1.5.13-15.11 is installed
  • OR typelib-1_0-IBus-1_0-1.5.13-15.11 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-ESPOS is installed
  • AND Package Information
  • kgraft-patch-4_4_156-94_61-default-8-2 is installed
  • OR kgraft-patch-SLE12-SP3_Update_19-8-2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
  • AND mutt-1.10.1-55.6 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND Package Information
  • krb5-appl-clients-1.0.3-1 is installed
  • OR krb5-appl-servers-1.0.3-1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 15-LTSS is installed
  • AND Package Information
  • libzstd1-1.4.4-1.3 is installed
  • OR libzstd1-32bit-1.4.4-1.3 is installed
  • OR zstd-1.4.4-1.3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server for SAP Applications 15 is installed
  • AND Package Information
  • xorg-x11-server-1.19.6-8.16 is installed
  • OR xorg-x11-server-extra-1.19.6-8.16 is installed
  • OR xorg-x11-server-sdk-1.19.6-8.16 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 15 is installed
  • AND Package Information
  • kernel-default-4.12.14-25.19 is installed
  • OR kernel-default-extra-4.12.14-25.19 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 15 SP1 is installed
  • AND Package Information
  • kernel-default-4.12.14-197.10 is installed
  • OR kernel-default-extra-4.12.14-197.10 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud 6 is installed
  • AND Package Information
  • krb5-1.12.1-38.5 is installed
  • OR krb5-32bit-1.12.1-38.5 is installed
  • OR krb5-client-1.12.1-38.5 is installed
  • OR krb5-doc-1.12.1-38.5 is installed
  • OR krb5-plugin-kdb-ldap-1.12.1-38.5 is installed
  • OR krb5-plugin-preauth-otp-1.12.1-38.5 is installed
  • OR krb5-plugin-preauth-pkinit-1.12.1-38.5 is installed
  • OR krb5-server-1.12.1-38.5 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud 7 is installed
  • AND Package Information
  • libsnmp30-5.7.3-6.3 is installed
  • OR libsnmp30-32bit-5.7.3-6.3 is installed
  • OR net-snmp-5.7.3-6.3 is installed
  • OR perl-SNMP-5.7.3-6.3 is installed
  • OR snmp-mibs-5.7.3-6.3 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud 8 is installed
  • AND Package Information
  • glibc-2.22-62.22 is installed
  • OR glibc-32bit-2.22-62.22 is installed
  • OR glibc-devel-2.22-62.22 is installed
  • OR glibc-devel-32bit-2.22-62.22 is installed
  • OR glibc-html-2.22-62.22 is installed
  • OR glibc-i18ndata-2.22-62.22 is installed
  • OR glibc-info-2.22-62.22 is installed
  • OR glibc-locale-2.22-62.22 is installed
  • OR glibc-locale-32bit-2.22-62.22 is installed
  • OR glibc-profile-2.22-62.22 is installed
  • OR glibc-profile-32bit-2.22-62.22 is installed
  • OR nscd-2.22-62.22 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud Crowbar 8 is installed
  • AND Package Information
  • java-1_7_1-ibm-1.7.1_sr4.50-38.41 is installed
  • OR java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41 is installed
  • OR java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41 is installed
  • OR java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41 is installed
  • BACK