Oval Definition:	oval:org.opensuse.security:def:50947
Revision Date: 2020-12-01 Version: 1 Title: Security update for perl-XML-Twig (Moderate) Description: This update for perl-XML-Twig fixes the following issues: - Security fix [bsc#1008644, CVE-2016-9180] * Setting expand_external_ents to 0 or -1 currently doesn't work as expected; To completely turn off expanding external entities use no_xxe. * Update documentation for XML::Twig to mention problems with expand_external_ents and add information about new no_xxe argument Family: unix Class: patch Status: Reference(s): 1008644 1027519 1044231 1051510 1051858 1056686 1060463 1065600 1065729 1066382 1071995 1078292 1083647 1085030 1085416 1087240 1091107 1094508 1097975 1103200 1103206 1103275 1103276 1103279 1103557 1103990 1103992 1104353 1104745 1104918 1105528 1108940 1109837 1109911 1111666 1111974 1112028 1112178 1112374 1113956 1114279 1114405 1114685 1115040 1115045 1115047 1116708 1117963 1117964 1117965 1117966 1117967 1118338 1119680 1120386 1120507 1123156 1127611 1133021 1134090 1136157 1136333 1137325 1141895 1142685 1142825 1142832 1142835 1144333 1145051 1145929 1146539 1148868 1149032 1153259 1155784 1156510 1157424 1158187 1158696 1158983 1159037 1159198 1159199 1159285 1160659 1161066 1161561 1161883 1161951 1162171 1162929 1162931 1163018 1163368 1163403 1163592 1163897 1163971 1164078 1164284 1164507 1164648 1164705 1164712 1164727 1164728 1164729 1164730 1164731 1164732 1164733 1164734 1164735 1164777 1164780 1164893 1165019 1165111 1165182 1165185 1165211 1165404 1165488 1165527 1165741 1165776 1165813 1165823 1165873 1165929 1165949 1165950 1165980 1165984 1165985 1166003 1166101 1166102 1166103 1166104 1166240 1166632 1166658 1166730 1166731 1166732 1166733 1166734 1166735 1166780 1166860 1166861 1166862 1166864 1166866 1166867 1166868 1166870 1166940 1166982 1167005 1167216 1167288 1167290 1167316 1167421 1167423 1167627 1167629 1168075 1168202 1168273 1168276 1168295 1168367 1168424 1168443 1168486 1168552 1168760 1168762 1168763 1168764 1168765 1168829 1168854 1168881 1168884 1168952 1169013 1169057 1169307 1169308 1169390 1169514 1169625 1170415 1170557 1170940 1174117 1174121 1174458 1175721 1175749 1175992 1176012 1176072 1176116 1176256 1176257 1176258 1176259 1176354 1176382 1176590 1177281 1177766 1177799 1177801 1178166 1178173 1178175 1178176 1178177 1178183 1178184 1178185 1178186 1178190 1178191 1178255 1178307 1178330 1178395 CVE-2016-9180 CVE-2018-0886 CVE-2018-1000852 CVE-2018-15468 CVE-2018-15469 CVE-2018-15470 CVE-2018-18883 CVE-2018-19961 CVE-2018-19962 CVE-2018-19965 CVE-2018-19966 CVE-2018-3646 CVE-2018-5804 CVE-2018-5813 CVE-2018-5815 CVE-2018-5816 CVE-2018-8784 CVE-2018-8785 CVE-2018-8786 CVE-2018-8787 CVE-2018-8788 CVE-2018-8789 CVE-2019-10181 CVE-2019-10182 CVE-2019-10185 CVE-2019-15043 CVE-2019-19727 CVE-2019-19768 CVE-2019-19770 CVE-2019-20382 CVE-2019-3701 CVE-2019-6778 CVE-2019-9458 CVE-2020-10942 CVE-2020-11494 CVE-2020-11669 CVE-2020-12245 CVE-2020-13379 CVE-2020-13934 CVE-2020-13935 CVE-2020-14339 CVE-2020-14374 CVE-2020-14375 CVE-2020-14376 CVE-2020-14377 CVE-2020-14378 CVE-2020-14381 CVE-2020-14386 CVE-2020-15166 CVE-2020-1711 CVE-2020-1983 CVE-2020-24394 CVE-2020-25212 CVE-2020-25656 CVE-2020-25705 CVE-2020-2732 CVE-2020-6796 CVE-2020-6797 CVE-2020-6798 CVE-2020-6799 CVE-2020-6800 CVE-2020-7039 CVE-2020-8608 CVE-2020-8647 CVE-2020-8649 CVE-2020-8694 CVE-2020-8834 CVE-2020-9383 SUSE-SU-2018:4300-1 SUSE-SU-2019:0005-1 SUSE-SU-2019:0539-1 SUSE-SU-2019:2033-1 SUSE-SU-2020:0228-1 SUSE-SU-2020:0383-1 SUSE-SU-2020:1087-1 SUSE-SU-2020:1523-1 SUSE-SU-2020:2172-1 SUSE-SU-2020:2269-1 SUSE-SU-2020:3264-1 SUSE-SU-2020:3273-1 Platform(s): SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for High Performance Computing 15 SP1 SUSE Linux Enterprise Module for Legacy Software 15 SP2 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 Product(s): Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information libpng12-0-1.2.31-5.35 is installed OR libpng12-0-32bit-1.2.31-5.35 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information glibc-2.19-17 is installed OR glibc-32bit-2.19-17 is installed OR glibc-devel-2.19-17 is installed OR glibc-devel-32bit-2.19-17 is installed OR glibc-i18ndata-2.19-17 is installed OR glibc-locale-2.19-17 is installed OR glibc-locale-32bit-2.19-17 is installed OR nscd-2.19-17 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND libgc1-7.2d-3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information libHX28-3.18-1 is installed OR libHX28-32bit-3.18-1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information cron-4.2-58 is installed OR cronie-1.4.11-58 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information dbus-1-glib-0.100.2-3 is installed OR dbus-1-glib-32bit-0.100.2-3 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed AND perl-XML-Twig-3.52-3.3 is installed Definition Synopsis SUSE Linux Enterprise Module for High Performance Computing 15 SP1 is installed AND Package Information libslurm32-17.11.13-6.23 is installed OR slurm-17.11.13-6.23 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 SP2 is installed AND Package Information kernel-default-5.3.18-24.37 is installed OR reiserfs-kmp-default-5.3.18-24.37 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND Package Information kernel-livepatch-4_12_14-197_48-default-3-2 is installed OR kernel-livepatch-SLE15-SP1_Update_13-3-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed AND Package Information MozillaFirefox-68.5.0-3.72 is installed OR MozillaFirefox-branding-upstream-68.5.0-3.72 is installed OR MozillaFirefox-buildsymbols-68.5.0-3.72 is installed OR MozillaFirefox-devel-68.5.0-3.72 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 is installed AND Package Information grafana-7.0.3-3.3 is installed OR grafana-piechart-panel-1.4.0-3.3 is installed OR grafana-status-panel-1.0.9-3.2 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed AND Package Information kernel-azure-4.12.14-8.30 is installed OR kernel-azure-base-4.12.14-8.30 is installed OR kernel-azure-devel-4.12.14-8.30 is installed OR kernel-devel-azure-4.12.14-8.30 is installed OR kernel-source-azure-4.12.14-8.30 is installed OR kernel-syms-azure-4.12.14-8.30 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 is installed AND Package Information xen-4.10.2_04-3.9 is installed OR xen-devel-4.10.2_04-3.9 is installed OR xen-tools-4.10.2_04-3.9 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP2 is installed AND Package Information libvirt-6.0.0-13.3 is installed OR libvirt-admin-6.0.0-13.3 is installed OR libvirt-bash-completion-6.0.0-13.3 is installed OR libvirt-client-6.0.0-13.3 is installed OR libvirt-daemon-6.0.0-13.3 is installed OR libvirt-daemon-config-network-6.0.0-13.3 is installed OR libvirt-daemon-config-nwfilter-6.0.0-13.3 is installed OR libvirt-daemon-driver-interface-6.0.0-13.3 is installed OR libvirt-daemon-driver-libxl-6.0.0-13.3 is installed OR libvirt-daemon-driver-lxc-6.0.0-13.3 is installed OR libvirt-daemon-driver-network-6.0.0-13.3 is installed OR libvirt-daemon-driver-nodedev-6.0.0-13.3 is installed OR libvirt-daemon-driver-nwfilter-6.0.0-13.3 is installed OR libvirt-daemon-driver-qemu-6.0.0-13.3 is installed OR libvirt-daemon-driver-secret-6.0.0-13.3 is installed OR libvirt-daemon-driver-storage-6.0.0-13.3 is installed OR libvirt-daemon-driver-storage-core-6.0.0-13.3 is installed OR libvirt-daemon-driver-storage-disk-6.0.0-13.3 is installed OR libvirt-daemon-driver-storage-iscsi-6.0.0-13.3 is installed OR libvirt-daemon-driver-storage-logical-6.0.0-13.3 is installed OR libvirt-daemon-driver-storage-mpath-6.0.0-13.3 is installed OR libvirt-daemon-driver-storage-rbd-6.0.0-13.3 is installed OR libvirt-daemon-driver-storage-scsi-6.0.0-13.3 is installed OR libvirt-daemon-hooks-6.0.0-13.3 is installed OR libvirt-daemon-lxc-6.0.0-13.3 is installed OR libvirt-daemon-qemu-6.0.0-13.3 is installed OR libvirt-daemon-xen-6.0.0-13.3 is installed OR libvirt-devel-6.0.0-13.3 is installed OR libvirt-doc-6.0.0-13.3 is installed OR libvirt-lock-sanlock-6.0.0-13.3 is installed OR libvirt-nss-6.0.0-13.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information libsmi-0.4.8-18 is installed OR libsmi2-0.4.8-18 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kgraft-patch-3_12_62-60_62-default-10-2 is installed OR kgraft-patch-3_12_62-60_62-xen-10-2 is installed OR kgraft-patch-SLE12-SP1_Update_7-10-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information libnm-glib-vpn1-1.0.12-8 is installed OR libnm-glib4-1.0.12-8 is installed OR libnm-util2-1.0.12-8 is installed OR libnm0-1.0.12-8 is installed OR typelib-1_0-NMClient-1_0-1.0.12-8 is installed OR typelib-1_0-NetworkManager-1_0-1.0.12-8 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information kernel-default-4.4.121-92.80 is installed OR kernel-default-base-4.4.121-92.80 is installed OR kernel-default-devel-4.4.121-92.80 is installed OR kernel-devel-4.4.121-92.80 is installed OR kernel-macros-4.4.121-92.80 is installed OR kernel-source-4.4.121-92.80 is installed OR kernel-syms-4.4.121-92.80 is installed OR kgraft-patch-4_4_121-92_80-default-1-3.5 is installed OR kgraft-patch-SLE12-SP2_Update_22-1-3.5 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information perl-5.18.2-12.14 is installed OR perl-32bit-5.18.2-12.14 is installed OR perl-base-5.18.2-12.14 is installed OR perl-doc-5.18.2-12.14 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information java-1_7_0-openjdk-1.7.0.181-43.15 is installed OR java-1_7_0-openjdk-demo-1.7.0.181-43.15 is installed OR java-1_7_0-openjdk-devel-1.7.0.181-43.15 is installed OR java-1_7_0-openjdk-headless-1.7.0.181-43.15 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP3 is installed AND MozillaFirefox-60.7.2-109.80 is installed OR MozillaFirefox-translations-common-60.7.2-109.80 is installed OR Package Information SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND MozillaFirefox-60.7.2-109.80 is installed OR MozillaFirefox-translations-common-60.7.2-109.80 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND apache2-mod_nss-1.0.14-18 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-BCL is installed AND Package Information MozillaFirefox-68.2.0-109.95 is installed OR MozillaFirefox-translations-common-68.2.0-109.95 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information libvirt-3.3.0-5.40 is installed OR libvirt-admin-3.3.0-5.40 is installed OR libvirt-client-3.3.0-5.40 is installed OR libvirt-daemon-3.3.0-5.40 is installed OR libvirt-daemon-config-network-3.3.0-5.40 is installed OR libvirt-daemon-config-nwfilter-3.3.0-5.40 is installed OR libvirt-daemon-driver-interface-3.3.0-5.40 is installed OR libvirt-daemon-driver-libxl-3.3.0-5.40 is installed OR libvirt-daemon-driver-lxc-3.3.0-5.40 is installed OR libvirt-daemon-driver-network-3.3.0-5.40 is installed OR libvirt-daemon-driver-nodedev-3.3.0-5.40 is installed OR libvirt-daemon-driver-nwfilter-3.3.0-5.40 is installed OR libvirt-daemon-driver-qemu-3.3.0-5.40 is installed OR libvirt-daemon-driver-secret-3.3.0-5.40 is installed OR libvirt-daemon-driver-storage-3.3.0-5.40 is installed OR libvirt-daemon-driver-storage-core-3.3.0-5.40 is installed OR libvirt-daemon-driver-storage-disk-3.3.0-5.40 is installed OR libvirt-daemon-driver-storage-iscsi-3.3.0-5.40 is installed OR libvirt-daemon-driver-storage-logical-3.3.0-5.40 is installed OR libvirt-daemon-driver-storage-mpath-3.3.0-5.40 is installed OR libvirt-daemon-driver-storage-rbd-3.3.0-5.40 is installed OR libvirt-daemon-driver-storage-scsi-3.3.0-5.40 is installed OR libvirt-daemon-hooks-3.3.0-5.40 is installed OR libvirt-daemon-lxc-3.3.0-5.40 is installed OR libvirt-daemon-qemu-3.3.0-5.40 is installed OR libvirt-daemon-xen-3.3.0-5.40 is installed OR libvirt-doc-3.3.0-5.40 is installed OR libvirt-libs-3.3.0-5.40 is installed OR libvirt-lock-sanlock-3.3.0-5.40 is installed OR libvirt-nss-3.3.0-5.40 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND wpa_supplicant-2.6-15.10 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information bash-4.3-83.15 is installed OR bash-doc-4.3-83.15 is installed OR libreadline6-6.3-83.15 is installed OR libreadline6-32bit-6.3-83.15 is installed OR readline-doc-6.3-83.15 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information qemu-2.11.2-9.36 is installed OR qemu-block-curl-2.11.2-9.36 is installed OR qemu-block-iscsi-2.11.2-9.36 is installed OR qemu-block-rbd-2.11.2-9.36 is installed OR qemu-block-ssh-2.11.2-9.36 is installed OR qemu-guest-agent-2.11.2-9.36 is installed OR qemu-ipxe-1.0.0+-9.36 is installed OR qemu-kvm-2.11.2-9.36 is installed OR qemu-lang-2.11.2-9.36 is installed OR qemu-ppc-2.11.2-9.36 is installed OR qemu-seabios-1.11.0-9.36 is installed OR qemu-sgabios-8-9.36 is installed OR qemu-tools-2.11.2-9.36 is installed OR qemu-vgabios-1.11.0-9.36 is installed OR qemu-x86-2.11.2-9.36 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND icedtea-web-1.7.2-3.3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND enigmail-2.0.11-3.16 is installed Definition Synopsis SUSE OpenStack Cloud 6 is installed AND Package Information evince-3.10.3-2.3 is installed OR evince-lang-3.10.3-2.3 is installed OR libevdocument3-4-3.10.3-2.3 is installed OR libevview3-3-3.10.3-2.3 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND yast2-smt-3.0.14-17.3 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND haproxy-1.6.11-11.3 is installed
BACK