Oval Definition:	oval:org.opensuse.security:def:50891
Revision Date: 2020-12-01 Version: 1 Title: Security update for librsvg (Moderate) Description: This update for librsvg to version 2.42.8 fixes the following issues: librsvg was updated to version 2.42.8 fixing the following issues: - CVE-2019-20446: Fixed an issue where a crafted SVG file with nested patterns can cause denial of service (bsc#1162501). NOTE: Librsvg now has limits on the number of loaded XML elements, and the number of referenced elements within an SVG document. - Fixed a stack exhaustion with circular references in elements. - Fixed a denial-of-service condition from exponential explosion of rendered elements, through nested use of SVG 'use' elements in malicious SVGs. Family: unix Class: patch Status: Reference(s): 1027282 1041090 1042670 1046303 1046305 1046306 1050244 1050252 1050549 1051510 1051858 1051979 1054610 1055121 1056658 1056662 1056787 1060463 1061840 1063638 1065600 1065729 1066110 1068664 1070995 1071995 1073269 1073748 1077761 1078248 1078326 1078355 1078485 1079300 1081750 1082943 1083507 1083548 1083647 1084216 1084650 1085030 1086001 1086095 1086274 1086282 1086301 1086313 1086314 1086323 1087081 1087082 1087092 1088004 1088009 1088133 1089343 1089644 1090888 1094555 1098382 1098425 1098995 1099811 1099813 1099844 1099845 1099846 1099849 1099858 1099863 1099864 1100132 1100356 1100369 1101116 1101331 1101669 1101828 1101832 1101833 1101837 1101839 1101841 1101843 1101844 1101845 1101847 1101852 1101853 1101867 1101872 1101874 1101875 1101882 1101883 1101885 1101887 1101890 1101891 1101893 1101895 1101896 1101900 1101902 1101903 1102633 1102658 1102687 1102688 1102689 1102899 1103097 1103356 1103421 1103429 1103517 1103723 1103724 1103725 1103726 1103727 1103728 1103729 1103730 1103917 1103920 1103948 1103949 1103989 1103990 1103991 1104066 1104111 1104174 1104211 1104319 1104353 1104427 1104745 1106105 1106434 1106811 1107078 1107665 1108043 1108101 1108870 1109160 1109695 1109837 1109847 1110096 1110705 1111666 1111793 1112178 1112374 1113042 1113712 1113722 1113755 1113939 1113956 1113994 1114279 1114585 1114685 1115026 1117108 1117155 1117169 1117645 1118338 1118367 1118368 1118661 1119019 1119086 1119113 1119766 1119843 1120008 1120318 1120601 1120758 1120853 1120854 1120902 1120909 1120955 1121317 1121726 1121789 1121805 1122019 1122191 1122192 1122324 1122554 1122662 1122764 1122779 1122822 1122885 1122927 1122944 1122971 1122982 1123060 1123061 1123161 1123317 1123328 1123348 1123357 1123456 1123538 1123697 1123882 1123933 1124055 1124204 1124235 1124579 1124589 1124728 1124732 1124735 1124969 1124974 1124975 1124976 1124978 1124979 1124980 1124981 1124982 1124984 1124985 1125109 1125125 1125252 1125315 1125614 1125728 1125780 1125797 1125799 1125800 1125907 1125947 1126131 1126206 1126209 1126389 1126390 1126393 1126476 1126480 1126481 1126488 1126495 1126555 1126579 1126789 1126790 1126802 1126803 1126804 1126805 1126806 1126807 1127042 1127062 1127082 1127154 1127285 1127286 1127307 1127354 1127363 1127371 1127493 1127494 1127495 1127496 1127497 1127498 1127534 1127561 1127567 1127595 1127603 1127611 1127682 1127731 1127750 1127836 1127961 1128094 1128166 1128220 1128351 1128451 1128895 1129046 1129080 1129163 1129179 1129181 1129182 1129183 1129184 1129205 1129281 1129284 1129285 1129291 1129292 1129293 1129294 1129295 1129296 1129326 1129327 1129330 1129346 1129363 1129366 1129497 1129519 1129543 1129547 1129551 1129581 1129625 1129664 1129739 1129770 1129923 1129991 1130840 1130847 1134973 1134983 1137223 1137236 1138039 1138459 1140948 1141054 1141132 1141853 1142095 1142635 1142924 1143959 1144333 1146519 1146544 1149792 1149955 1151067 1151548 1151900 1151910 1151927 1152107 1152631 1152763 1153238 1153535 1153628 1153811 1153830 1153917 1153921 1154043 1154058 1154243 1154355 1154601 1154768 1154916 1155331 1155334 1155689 1155897 1155921 1156205 1156258 1156259 1156286 1156462 1156471 1156928 1157032 1157038 1157042 1157044 1157045 1157046 1157049 1157051 1157070 1157115 1157143 1157145 1157155 1157157 1157158 1157160 1157162 1157169 1157171 1157173 1157178 1157180 1157182 1157183 1157184 1157191 1157193 1157197 1157298 1157303 1157304 1157307 1157324 1157333 1157386 1157424 1157463 1157499 1157678 1157692 1157698 1157778 1157853 1157895 1157908 1158013 1158021 1158026 1158049 1158063 1158064 1158065 1158066 1158067 1158068 1158071 1158082 1158094 1158132 1158381 1158394 1158398 1158407 1158410 1158413 1158417 1158427 1158445 1158533 1158637 1158638 1158639 1158640 1158641 1158643 1158644 1158645 1158646 1158647 1158649 1158651 1158652 1158819 1158823 1158824 1158827 1158834 1158893 1158900 1158903 1158904 1158954 1159024 1159028 1159035 1159297 1159377 1159394 1159483 1159484 1159500 1159569 1159588 1159841 1159908 1159909 1159910 1159911 1159955 1160147 1160195 1160210 1160211 1160433 1160442 1160469 1160470 1160476 1160560 1160618 1160678 1160755 1160756 1160784 1160787 1160802 1160803 1160804 1160917 1160966 1161087 1161168 1161243 1161472 1161514 1161518 1161522 1161523 1161549 1161552 1161674 1161931 1161933 1161934 1161935 1161936 1161937 1162028 1162067 1162109 1162139 1162501 1165631 1167244 1168938 1170667 1170713 1171252 1171254 1171313 1171740 1172356 1172958 1173307 1173311 1173786 1173983 1174543 1174628 1175443 1176092 1176410 1176674 1177143 1177351 1177352 214983 298378 346490 367853 379534 380942 399190 406051 425138 426563 430761 432677 436966 437293 441088 462375 525295 534721 551715 572673 577032 581765 603255 617751 637176 638233 658604 673071 682554 697251 707667 718009 747125 747794 751718 754447 766778 794139 804978 824948 827982 831442 834601 836739 856835 856836 857470 863741 885882 898572 901715 906079 935856 945401 964182 984751 985177 985348 989523 997436 CVE-2007-2052 CVE-2008-1721 CVE-2008-2315 CVE-2008-2316 CVE-2008-3142 CVE-2008-3143 CVE-2008-3144 CVE-2011-1521 CVE-2011-3389 CVE-2011-4944 CVE-2012-0845 CVE-2012-1150 CVE-2013-1752 CVE-2013-1753 CVE-2013-4238 CVE-2014-1912 CVE-2014-4650 CVE-2014-7185 CVE-2016-0772 CVE-2016-1000110 CVE-2016-5636 CVE-2016-5699 CVE-2017-1000158 CVE-2017-18207 CVE-2017-3136 CVE-2018-1000030 CVE-2018-1000802 CVE-2018-1060 CVE-2018-1061 CVE-2018-10876 CVE-2018-10877 CVE-2018-10878 CVE-2018-10879 CVE-2018-10880 CVE-2018-10881 CVE-2018-10882 CVE-2018-10883 CVE-2018-13302 CVE-2018-14647 CVE-2018-1999010 CVE-2018-1999011 CVE-2018-1999012 CVE-2018-1999013 CVE-2018-20669 CVE-2018-20852 CVE-2018-3620 CVE-2018-3646 CVE-2018-5391 CVE-2018-5741 CVE-2019-10160 CVE-2019-13508 CVE-2019-14615 CVE-2019-14895 CVE-2019-14896 CVE-2019-14897 CVE-2019-14901 CVE-2019-15213 CVE-2019-16056 CVE-2019-16746 CVE-2019-16935 CVE-2019-16994 CVE-2019-18660 CVE-2019-18683 CVE-2019-18808 CVE-2019-18809 CVE-2019-19036 CVE-2019-19045 CVE-2019-19046 CVE-2019-19049 CVE-2019-19051 CVE-2019-19052 CVE-2019-19054 CVE-2019-19056 CVE-2019-19057 CVE-2019-19058 CVE-2019-19060 CVE-2019-19062 CVE-2019-19063 CVE-2019-19065 CVE-2019-19066 CVE-2019-19067 CVE-2019-19068 CVE-2019-19073 CVE-2019-19074 CVE-2019-19075 CVE-2019-19077 CVE-2019-19078 CVE-2019-19080 CVE-2019-19081 CVE-2019-19082 CVE-2019-19083 CVE-2019-19227 CVE-2019-19318 CVE-2019-19319 CVE-2019-19332 CVE-2019-19338 CVE-2019-19447 CVE-2019-19523 CVE-2019-19524 CVE-2019-19525 CVE-2019-19526 CVE-2019-19527 CVE-2019-19528 CVE-2019-19529 CVE-2019-19530 CVE-2019-19531 CVE-2019-19532 CVE-2019-19533 CVE-2019-19534 CVE-2019-19535 CVE-2019-19536 CVE-2019-19537 CVE-2019-19543 CVE-2019-19767 CVE-2019-19927 CVE-2019-19965 CVE-2019-19966 CVE-2019-20054 CVE-2019-20095 CVE-2019-20096 CVE-2019-2024 CVE-2019-20446 CVE-2019-3459 CVE-2019-3460 CVE-2019-3695 CVE-2019-3696 CVE-2019-3819 CVE-2019-5010 CVE-2019-6477 CVE-2019-6974 CVE-2019-7221 CVE-2019-7222 CVE-2019-7308 CVE-2019-8912 CVE-2019-8980 CVE-2019-9213 CVE-2019-9636 CVE-2019-9947 CVE-2019-9948 CVE-2020-10663 CVE-2020-10933 CVE-2020-12653 CVE-2020-12654 CVE-2020-14344 CVE-2020-1749 CVE-2020-25219 CVE-2020-26154 CVE-2020-7053 CVE-2020-7069 CVE-2020-7069 CVE-2020-7070 CVE-2020-7070 CVE-2020-8428 CVE-2020-8616 CVE-2020-8617 CVE-2020-8618 CVE-2020-8619 CVE-2020-8620 CVE-2020-8621 CVE-2020-8622 CVE-2020-8623 CVE-2020-8624 SUSE-SU-2018:2305-1 SUSE-SU-2018:2380-1 SUSE-SU-2019:0784-1 SUSE-SU-2020:0234-1 SUSE-SU-2020:0357-1 SUSE-SU-2020:0613-1 SUSE-SU-2020:0629-1 SUSE-SU-2020:0995-1 SUSE-SU-2020:1417-1 SUSE-SU-2020:1452-1 SUSE-SU-2020:2197-1 SUSE-SU-2020:2901-1 SUSE-SU-2020:2997-1 Platform(s): SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for additional PackageHub packages 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Legacy Software 15 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 SUSE Linux Enterprise Module for Python2 packages 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information gnutls-2.4.1-24.39.60 is installed OR libgnutls26-2.4.1-24.39.60 is installed OR libgnutls26-32bit-2.4.1-24.39.60 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information gnutls-3.2.15-1 is installed OR libgnutls28-3.2.15-1 is installed OR libgnutls28-32bit-3.2.15-1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information gnome-shell-3.10.4-40 is installed OR gnome-shell-browser-plugin-3.10.4-40 is installed OR gnome-shell-calendar-3.10.4-40 is installed OR gnome-shell-lang-3.10.4-40 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND dracut-044-87 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND clamav-0.99.2-32 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information hplip-3.16.11-1 is installed OR hplip-hpijs-3.16.11-1 is installed OR hplip-sane-3.16.11-1 is installed Definition Synopsis SUSE Linux Enterprise Module for additional PackageHub packages 15 SP1 is installed AND Package Information php7-7.2.5-4.67 is installed OR php7-embed-7.2.5-4.67 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed AND Package Information gdk-pixbuf-loader-rsvg-2.42.8-3.3 is installed OR librsvg-2.42.8-3.3 is installed OR librsvg-2-2-2.42.8-3.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed AND Package Information libX11-1.6.5-3.9 is installed OR libX11-6-1.6.5-3.9 is installed OR libX11-6-32bit-1.6.5-3.9 is installed OR libX11-data-1.6.5-3.9 is installed OR libX11-devel-1.6.5-3.9 is installed OR libX11-xcb1-1.6.5-3.9 is installed OR libX11-xcb1-32bit-1.6.5-3.9 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 is installed AND Package Information kernel-default-4.12.14-150.14 is installed OR reiserfs-kmp-default-4.12.14-150.14 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND Package Information kernel-livepatch-4_12_14-197_40-default-2-2 is installed OR kernel-livepatch-SLE15-SP1_Update_11-2-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed AND Package Information bind-9.16.6-12.32 is installed OR bind-devel-32bit-9.16.6-12.32 is installed OR libbind9-1600-32bit-9.16.6-12.32 is installed OR libdns1605-32bit-9.16.6-12.32 is installed OR libirs1601-32bit-9.16.6-12.32 is installed OR libisc1606-32bit-9.16.6-12.32 is installed OR libisccc1600-32bit-9.16.6-12.32 is installed OR libisccfg1600-32bit-9.16.6-12.32 is installed OR libns1604-32bit-9.16.6-12.32 is installed OR sysuser-tools-2.0-4.2 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 is installed AND Package Information xen-4.13.1_06-3.7 is installed OR xen-devel-4.13.1_06-3.7 is installed OR xen-doc-html-4.13.1_06-3.7 is installed OR xen-libs-4.13.1_06-3.7 is installed OR xen-libs-32bit-4.13.1_06-3.7 is installed OR xen-tools-4.13.1_06-3.7 is installed OR xen-tools-domU-4.13.1_06-3.7 is installed Definition Synopsis SUSE Linux Enterprise Module for Python2 packages 15 SP1 is installed AND Package Information python-2.7.17-7.32 is installed OR python-base-2.7.17-7.32 is installed OR python-curses-2.7.17-7.32 is installed OR python-devel-2.7.17-7.32 is installed OR python-gdbm-2.7.17-7.32 is installed OR python-xml-2.7.17-7.32 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed AND Package Information freetds-1.1.36-3.3 is installed OR libct4-1.1.36-3.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information libXxf86vm1-1.1.3-3 is installed OR libXxf86vm1-32bit-1.1.3-3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kgraft-patch-3_12_67-60_64_21-default-9-2 is installed OR kgraft-patch-3_12_67-60_64_21-xen-9-2 is installed OR kgraft-patch-SLE12-SP1_Update_10-9-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information libXt6-1.1.4-3 is installed OR libXt6-32bit-1.1.4-3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information xen-4.7.6_02-43.36 is installed OR xen-doc-html-4.7.6_02-43.36 is installed OR xen-libs-4.7.6_02-43.36 is installed OR xen-libs-32bit-4.7.6_02-43.36 is installed OR xen-tools-4.7.6_02-43.36 is installed OR xen-tools-domU-4.7.6_02-43.36 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information xen-4.7.6_05-43.42 is installed OR xen-doc-html-4.7.6_05-43.42 is installed OR xen-libs-4.7.6_05-43.42 is installed OR xen-libs-32bit-4.7.6_05-43.42 is installed OR xen-tools-4.7.6_05-43.42 is installed OR xen-tools-domU-4.7.6_05-43.42 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information kgraft-patch-4_4_90-92_50-default-7-2 is installed OR kgraft-patch-SLE12-SP2_Update_15-7-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information DirectFB-1.7.1-6 is installed OR lib++dfb-1_7-1-1.7.1-6 is installed OR libdirectfb-1_7-1-1.7.1-6 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information nfs-client-1.3.0-34.22 is installed OR nfs-doc-1.3.0-34.22 is installed OR nfs-kernel-server-1.3.0-34.22 is installed OR nfs-utils-1.3.0-34.22 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information tomcat-8.0.53-29.16 is installed OR tomcat-admin-webapps-8.0.53-29.16 is installed OR tomcat-docs-webapp-8.0.53-29.16 is installed OR tomcat-el-3_0-api-8.0.53-29.16 is installed OR tomcat-javadoc-8.0.53-29.16 is installed OR tomcat-jsp-2_3-api-8.0.53-29.16 is installed OR tomcat-lib-8.0.53-29.16 is installed OR tomcat-servlet-3_1-api-8.0.53-29.16 is installed OR tomcat-webapps-8.0.53-29.16 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information python-doc-2.7.13-28.11 is installed OR python-doc-pdf-2.7.13-28.11 is installed Definition Synopsis SUSE Linux Enterprise Server 15-LTSS is installed AND Package Information libproxy-0.4.15-4.3 is installed OR libproxy-devel-0.4.15-4.3 is installed OR libproxy-plugins-0.4.15-4.3 is installed OR libproxy1-0.4.15-4.3 is installed OR perl-Net-Libproxy-0.4.15-4.3 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information libpcp-devel-3.11.9-5.8 is installed OR libpcp3-3.11.9-5.8 is installed OR libpcp_gui2-3.11.9-5.8 is installed OR libpcp_import1-3.11.9-5.8 is installed OR libpcp_mmv1-3.11.9-5.8 is installed OR libpcp_trace2-3.11.9-5.8 is installed OR libpcp_web1-3.11.9-5.8 is installed OR pcp-3.11.9-5.8 is installed OR pcp-conf-3.11.9-5.8 is installed OR pcp-devel-3.11.9-5.8 is installed OR pcp-doc-3.11.9-5.8 is installed OR pcp-import-iostat2pcp-3.11.9-5.8 is installed OR pcp-import-mrtg2pcp-3.11.9-5.8 is installed OR pcp-import-sar2pcp-3.11.9-5.8 is installed OR perl-PCP-LogImport-3.11.9-5.8 is installed OR perl-PCP-LogSummary-3.11.9-5.8 is installed OR perl-PCP-MMV-3.11.9-5.8 is installed OR perl-PCP-PMDA-3.11.9-5.8 is installed OR python-pcp-3.11.9-5.8 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information ffmpeg-3.4.2-4.5 is installed OR libavcodec-devel-3.4.2-4.5 is installed OR libavformat-devel-3.4.2-4.5 is installed OR libavformat57-3.4.2-4.5 is installed OR libavresample-devel-3.4.2-4.5 is installed OR libavresample3-3.4.2-4.5 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP2 is installed AND Package Information kernel-default-5.3.18-24.24 is installed OR kernel-default-extra-5.3.18-24.24 is installed Definition Synopsis SUSE OpenStack Cloud 6 is installed AND Package Information openstack-cinder-7.0.2~a0~dev1-1 is installed OR openstack-cinder-api-7.0.2~a0~dev1-1 is installed OR openstack-cinder-backup-7.0.2~a0~dev1-1 is installed OR openstack-cinder-scheduler-7.0.2~a0~dev1-1 is installed OR openstack-cinder-volume-7.0.2~a0~dev1-1 is installed OR python-cinder-7.0.2~a0~dev1-1 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND Package Information openstack-glance-13.0.1~a0~dev6-4.3 is installed OR openstack-glance-api-13.0.1~a0~dev6-4.3 is installed OR openstack-glance-doc-13.0.1~a0~dev6-4.3 is installed OR openstack-glance-glare-13.0.1~a0~dev6-4.3 is installed OR openstack-glance-registry-13.0.1~a0~dev6-4.3 is installed OR python-glance-13.0.1~a0~dev6-4.3 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND Package Information java-1_8_0-openjdk-1.8.0.222-27.35 is installed OR java-1_8_0-openjdk-demo-1.8.0.222-27.35 is installed OR java-1_8_0-openjdk-devel-1.8.0.222-27.35 is installed OR java-1_8_0-openjdk-headless-1.8.0.222-27.35 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND clamav-0.100.3-33.29 is installed
BACK