Oval Definition:	oval:org.opensuse.security:def:51048
Revision Date: 2020-12-01 Version: 1 Title: Security update for runc (Moderate) Description: This update for runc fixes the following issues: Security issue fixed: - CVE-2019-16884: Fixed an LSM bypass via malicious Docker images that mount over a /proc directory. (bsc#1152308) Non-security issues fixed: - Includes upstreamed patches for regressions (bsc#1131314 bsc#1131553). Family: unix Class: patch Status: Reference(s): 1076907 1084929 1085780 1091376 1097410 1098998 1100078 1100079 1100081 1100082 1100780 1106272 1106873 1108474 1112209 1113534 1113652 1113742 1114529 1119069 1119105 1124729 1124734 1126284 1128378 1131314 1131553 1133719 1137137 1138734 1145586 1148643 1149100 1152308 1162689 1162691 1163985 1167373 1168683 1169659 1170313 1171496 1171497 1171498 1171499 1171924 1172383 1172384 1172386 1172495 1172710 1174230 1176384 1176756 1176899 1177977 1178067 1178387 CVE-2012-0247 CVE-2012-0248 CVE-2012-1185 CVE-2012-1186 CVE-2018-0495 CVE-2018-0734 CVE-2018-12359 CVE-2018-12360 CVE-2018-12362 CVE-2018-12363 CVE-2018-12364 CVE-2018-12365 CVE-2018-12366 CVE-2018-12372 CVE-2018-12373 CVE-2018-12374 CVE-2018-12384 CVE-2018-12404 CVE-2018-12405 CVE-2018-16847 CVE-2018-17466 CVE-2018-18492 CVE-2018-18493 CVE-2018-18494 CVE-2018-18498 CVE-2018-5188 CVE-2018-5407 CVE-2019-12519 CVE-2019-12521 CVE-2019-12528 CVE-2019-16884 CVE-2019-18860 CVE-2019-6974 CVE-2019-7221 CVE-2019-8912 CVE-2019-9213 CVE-2020-10703 CVE-2020-10761 CVE-2020-11863 CVE-2020-11864 CVE-2020-11865 CVE-2020-11866 CVE-2020-11945 CVE-2020-13361 CVE-2020-13362 CVE-2020-13659 CVE-2020-13800 CVE-2020-15673 CVE-2020-15676 CVE-2020-15677 CVE-2020-15678 CVE-2020-15683 CVE-2020-15969 CVE-2020-1720 CVE-2020-25692 CVE-2020-27560 CVE-2020-8517 SUSE-SU-2018:2174-1 SUSE-SU-2018:4001-1 SUSE-SU-2018:4086-1 SUSE-SU-2018:4235-1 SUSE-SU-2019:2810-1 SUSE-SU-2020:1156-1 SUSE-SU-2020:1250-1 SUSE-SU-2020:1621-2 SUSE-SU-2020:2149-1 SUSE-SU-2020:3091-1 SUSE-SU-2020:3313-1 Platform(s): SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for additional PackageHub packages 15 SP1 SUSE Linux Enterprise Module for Containers 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Module for Legacy Software 15 SUSE Linux Enterprise Module for Legacy Software 15 SP2 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information libpixman-1-0-0.16.0-1.4 is installed OR libpixman-1-0-32bit-0.16.0-1.4 is installed OR libpixman-1-0-devel-0.16.0-1.4 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information xen-4.2.4_04-0.9 is installed OR xen-doc-html-4.2.4_04-0.9 is installed OR xen-doc-pdf-4.2.4_04-0.9 is installed OR xen-kmp-default-4.2.4_04_3.0.101_0.40-0.9 is installed OR xen-kmp-pae-4.2.4_04_3.0.101_0.40-0.9 is installed OR xen-libs-4.2.4_04-0.9 is installed OR xen-libs-32bit-4.2.4_04-0.9 is installed OR xen-tools-4.2.4_04-0.9 is installed OR xen-tools-domU-4.2.4_04-0.9 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information ImageMagick-6.8.8.1-5 is installed OR libMagick++-6_Q16-3-6.8.8.1-5 is installed OR libMagickCore-6_Q16-1-6.8.8.1-5 is installed OR libMagickCore-6_Q16-1-32bit-6.8.8.1-5 is installed OR libMagickWand-6_Q16-1-6.8.8.1-5 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information gimp-2.8.10-1 is installed OR gimp-lang-2.8.10-1 is installed OR gimp-plugins-python-2.8.10-1 is installed OR libgimp-2_0-0-2.8.10-1 is installed OR libgimpui-2_0-0-2.8.10-1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information curl-7.37.0-28 is installed OR libcurl4-7.37.0-28 is installed OR libcurl4-32bit-7.37.0-28 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND cvs-1.12.12-181 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information gnome-shell-search-provider-nautilus-3.20.3-23.6 is installed OR libnautilus-extension1-3.20.3-23.6 is installed OR libnautilus-extension1-32bit-3.20.3-23.6 is installed OR nautilus-3.20.3-23.6 is installed OR nautilus-lang-3.20.3-23.6 is installed Definition Synopsis SUSE Linux Enterprise Module for additional PackageHub packages 15 SP1 is installed AND Package Information postgresql-12.0.1-8.14 is installed OR postgresql-test-12.0.1-8.14 is installed Definition Synopsis SUSE Linux Enterprise Module for Containers 15 SP1 is installed AND runc-1.0.0~rc8-1.6 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 is installed AND Package Information MozillaFirefox-60.4.0-3.21 is installed OR MozillaFirefox-devel-60.4.0-3.21 is installed OR MozillaFirefox-translations-common-60.4.0-3.21 is installed OR MozillaFirefox-translations-other-60.4.0-3.21 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 is installed AND Package Information libopenssl-1_0_0-devel-1.0.2p-3.11 is installed OR libopenssl1_0_0-1.0.2p-3.11 is installed OR openssl-1_0_0-1.0.2p-3.11 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 SP2 is installed AND Package Information openldap2-2.4.46-9.40 is installed OR openldap2-back-meta-2.4.46-9.40 is installed OR openldap2-back-perl-2.4.46-9.40 is installed OR openldap2-ppolicy-check-password-1.2-9.40 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 is installed AND Package Information kernel-livepatch-4_12_14-25_19-default-5-2 is installed OR kernel-livepatch-SLE15_Update_5-5-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 is installed AND Package Information qemu-4.2.1-11.4 is installed OR qemu-arm-4.2.1-11.4 is installed OR qemu-audio-alsa-4.2.1-11.4 is installed OR qemu-audio-pa-4.2.1-11.4 is installed OR qemu-block-dmg-4.2.1-11.4 is installed OR qemu-extra-4.2.1-11.4 is installed OR qemu-linux-user-4.2.1-11.4 is installed OR qemu-microvm-4.2.1-11.4 is installed OR qemu-ppc-4.2.1-11.4 is installed OR qemu-s390-4.2.1-11.4 is installed OR qemu-seabios-1.12.1+-11.4 is installed OR qemu-sgabios-8-11.4 is installed OR qemu-testsuite-4.2.1-11.4 is installed OR qemu-ui-curses-4.2.1-11.4 is installed OR qemu-ui-gtk-4.2.1-11.4 is installed OR qemu-vhost-user-gpu-4.2.1-11.4 is installed OR qemu-x86-4.2.1-11.4 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 is installed AND Package Information qemu-2.11.2-9.17 is installed OR qemu-arm-2.11.2-9.17 is installed OR qemu-block-curl-2.11.2-9.17 is installed OR qemu-block-iscsi-2.11.2-9.17 is installed OR qemu-block-rbd-2.11.2-9.17 is installed OR qemu-block-ssh-2.11.2-9.17 is installed OR qemu-guest-agent-2.11.2-9.17 is installed OR qemu-ipxe-1.0.0+-9.17 is installed OR qemu-kvm-2.11.2-9.17 is installed OR qemu-lang-2.11.2-9.17 is installed OR qemu-ppc-2.11.2-9.17 is installed OR qemu-s390-2.11.2-9.17 is installed OR qemu-seabios-1.11.0-9.17 is installed OR qemu-sgabios-8-9.17 is installed OR qemu-vgabios-1.11.0-9.17 is installed OR qemu-x86-2.11.2-9.17 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed AND squid-4.11-5.17 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND xdg-utils-20140630-5 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kgraft-patch-3_12_74-60_64_48-default-6-2 is installed OR kgraft-patch-3_12_74-60_64_48-xen-6-2 is installed OR kgraft-patch-SLE12-SP1_Update_17-6-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information alsa-1.0.27.2-11 is installed OR alsa-docs-1.0.27.2-11 is installed OR libasound2-1.0.27.2-11 is installed OR libasound2-32bit-1.0.27.2-11 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND mailman-2.1.17-3.11 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND ucode-intel-20180807-13.29 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information dovecot22-2.2.31-19.11 is installed OR dovecot22-backend-mysql-2.2.31-19.11 is installed OR dovecot22-backend-pgsql-2.2.31-19.11 is installed OR dovecot22-backend-sqlite-2.2.31-19.11 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND apache-commons-httpclient-3.1-4 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-BCL is installed AND Package Information java-1_7_0-openjdk-1.7.0.241-43.30 is installed OR java-1_7_0-openjdk-demo-1.7.0.241-43.30 is installed OR java-1_7_0-openjdk-devel-1.7.0.241-43.30 is installed OR java-1_7_0-openjdk-headless-1.7.0.241-43.30 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND Package Information libecpg6-10.9-1.12 is installed OR libpq5-10.9-1.12 is installed OR libpq5-32bit-10.9-1.12 is installed OR postgresql10-10.9-1.12 is installed OR postgresql10-contrib-10.9-1.12 is installed OR postgresql10-docs-10.9-1.12 is installed OR postgresql10-libs-10.9-1.12 is installed OR postgresql10-plperl-10.9-1.12 is installed OR postgresql10-plpython-10.9-1.12 is installed OR postgresql10-pltcl-10.9-1.12 is installed OR postgresql10-server-10.9-1.12 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information MozillaFirefox-68.1.0-109.89 is installed OR MozillaFirefox-branding-SLE-68-32.8 is installed OR MozillaFirefox-translations-common-68.1.0-109.89 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information qemu-2.9.1-6.41 is installed OR qemu-block-curl-2.9.1-6.41 is installed OR qemu-block-iscsi-2.9.1-6.41 is installed OR qemu-block-rbd-2.9.1-6.41 is installed OR qemu-block-ssh-2.9.1-6.41 is installed OR qemu-guest-agent-2.9.1-6.41 is installed OR qemu-ipxe-1.0.0+-6.41 is installed OR qemu-kvm-2.9.1-6.41 is installed OR qemu-lang-2.9.1-6.41 is installed OR qemu-seabios-1.10.2-6.41 is installed OR qemu-sgabios-8-6.41 is installed OR qemu-tools-2.9.1-6.41 is installed OR qemu-vgabios-1.10.2-6.41 is installed OR qemu-x86-2.9.1-6.41 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND apache2-mod_nss-1.0.14-19.3 is installed Definition Synopsis SUSE Linux Enterprise Server 15-LTSS is installed AND Package Information libvirt-4.0.0-9.32 is installed OR libvirt-admin-4.0.0-9.32 is installed OR libvirt-client-4.0.0-9.32 is installed OR libvirt-daemon-4.0.0-9.32 is installed OR libvirt-daemon-config-network-4.0.0-9.32 is installed OR libvirt-daemon-config-nwfilter-4.0.0-9.32 is installed OR libvirt-daemon-driver-interface-4.0.0-9.32 is installed OR libvirt-daemon-driver-libxl-4.0.0-9.32 is installed OR libvirt-daemon-driver-lxc-4.0.0-9.32 is installed OR libvirt-daemon-driver-network-4.0.0-9.32 is installed OR libvirt-daemon-driver-nodedev-4.0.0-9.32 is installed OR libvirt-daemon-driver-nwfilter-4.0.0-9.32 is installed OR libvirt-daemon-driver-qemu-4.0.0-9.32 is installed OR libvirt-daemon-driver-secret-4.0.0-9.32 is installed OR libvirt-daemon-driver-storage-4.0.0-9.32 is installed OR libvirt-daemon-driver-storage-core-4.0.0-9.32 is installed OR libvirt-daemon-driver-storage-disk-4.0.0-9.32 is installed OR libvirt-daemon-driver-storage-iscsi-4.0.0-9.32 is installed OR libvirt-daemon-driver-storage-logical-4.0.0-9.32 is installed OR libvirt-daemon-driver-storage-mpath-4.0.0-9.32 is installed OR libvirt-daemon-driver-storage-rbd-4.0.0-9.32 is installed OR libvirt-daemon-driver-storage-scsi-4.0.0-9.32 is installed OR libvirt-daemon-hooks-4.0.0-9.32 is installed OR libvirt-daemon-lxc-4.0.0-9.32 is installed OR libvirt-daemon-qemu-4.0.0-9.32 is installed OR libvirt-daemon-xen-4.0.0-9.32 is installed OR libvirt-devel-4.0.0-9.32 is installed OR libvirt-doc-4.0.0-9.32 is installed OR libvirt-libs-4.0.0-9.32 is installed OR libvirt-lock-sanlock-4.0.0-9.32 is installed OR libvirt-nss-4.0.0-9.32 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information MozillaThunderbird-52.9.1-3.7 is installed OR MozillaThunderbird-devel-52.9.1-3.7 is installed OR MozillaThunderbird-translations-common-52.9.1-3.7 is installed OR MozillaThunderbird-translations-other-52.9.1-3.7 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP2 is installed AND Package Information libEMF-1.0.7-3.3 is installed OR libEMF1-1.0.7-3.3 is installed Definition Synopsis SUSE OpenStack Cloud 6 is installed AND Package Information openstack-trove-4.0.1~a0~dev2-2 is installed OR openstack-trove-api-4.0.1~a0~dev2-2 is installed OR openstack-trove-conductor-4.0.1~a0~dev2-2 is installed OR openstack-trove-guestagent-4.0.1~a0~dev2-2 is installed OR openstack-trove-taskmanager-4.0.1~a0~dev2-2 is installed OR python-trove-4.0.1~a0~dev2-2 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND python-pycrypto-2.6.1-10.3 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND Package Information libpython2_7-1_0-2.7.13-28.31 is installed OR libpython2_7-1_0-32bit-2.7.13-28.31 is installed OR python-2.7.13-28.31 is installed OR python-32bit-2.7.13-28.31 is installed OR python-base-2.7.13-28.31 is installed OR python-base-32bit-2.7.13-28.31 is installed OR python-curses-2.7.13-28.31 is installed OR python-demo-2.7.13-28.31 is installed OR python-devel-2.7.13-28.31 is installed OR python-doc-2.7.13-28.31 is installed OR python-doc-pdf-2.7.13-28.31 is installed OR python-gdbm-2.7.13-28.31 is installed OR python-idle-2.7.13-28.31 is installed OR python-tk-2.7.13-28.31 is installed OR python-xml-2.7.13-28.31 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND Package Information libssh2-1-1.4.3-20.14 is installed OR libssh2-1-32bit-1.4.3-20.14 is installed OR libssh2_org-1.4.3-20.14 is installed
BACK