Oval Definition:	oval:org.opensuse.security:def:51203
Revision Date: 2020-12-01 Version: 1 Title: Security update for libvpx (Important) Description: This update for libvpx fixes the following issues: - CVE-2019-2126: Fixed a double free in ParseContentEncodingEntry() (bsc#1160611). - CVE-2019-9325: Fixed an out-of-bounds read (bsc#1160612). - CVE-2019-9232: Fixed an out-of-bounds memory access on fuzzed data (bsc#1160613). - CVE-2019-9433: Fixed a use-after-free in vp8_deblock() (bsc#1160614). - CVE-2019-9371: Fixed a resource exhaustion after memory leak (bsc#1160615). Family: unix Class: patch Status: Reference(s): 1055014 1055186 1058115 1061843 1065600 1065729 1066382 1077428 1092115 1094244 1094898 1098735 1099306 1102604 1103628 1105279 1112178 1123156 1131277 1134760 1136666 1149841 1151021 1152148 1152472 1152489 1153274 1154353 1154790 1155518 1155798 1156395 1159913 1160611 1160612 1160613 1160614 1160615 1161066 1162689 1162691 1162729 1163018 1165631 1165776 1166240 1166379 1167373 1167527 1169659 1170232 1170313 1170415 1170774 1171000 1171068 1171073 1171558 1171688 1171742 1172004 1172419 1172757 1172873 1173017 1173060 1173115 1173267 1173389 1173432 1173746 1174029 1174110 1174111 1174157 1174358 1174484 1174486 1174748 1174899 1175259 1175263 1175667 1175718 1175749 1175787 1175882 1175952 1175996 1175997 1175998 1175999 1176000 1176001 1176019 1176022 1176038 1176063 1176137 1176235 1176236 1176237 1176242 1176278 1176354 1176357 1176358 1176359 1176360 1176361 1176362 1176363 1176364 1176365 1176366 1176367 1176381 1176423 1176449 1176482 1176485 1176486 1176507 1176536 1176537 1176538 1176539 1176540 1176541 1176542 1176544 1176545 1176546 1176548 1176558 1176559 1176560 1176587 1176588 1176659 1176698 1176699 1176700 1176713 1176721 1176722 1176723 1176725 1176732 1176763 1176775 1176788 1176789 1176833 1176869 1176877 1176925 1176962 1176980 1176990 1177021 1177030 1177086 1177101 1177271 1177281 1177410 1177411 1177470 1177687 1177719 1177740 1177749 1177750 1177753 1177754 1177755 1177766 1177855 1177856 1177861 1178003 1178027 1178166 1178185 1178187 1178188 1178202 1178234 1178330 CVE-2009-1885 CVE-2013-2064 CVE-2014-3970 CVE-2018-12617 CVE-2018-3646 CVE-2018-9154 CVE-2019-12519 CVE-2019-12521 CVE-2019-12528 CVE-2019-14835 CVE-2019-15034 CVE-2019-17639 CVE-2019-18860 CVE-2019-20382 CVE-2019-2126 CVE-2019-5108 CVE-2019-6778 CVE-2019-9232 CVE-2019-9325 CVE-2019-9371 CVE-2019-9433 CVE-2020-0404 CVE-2020-0427 CVE-2020-0430 CVE-2020-0431 CVE-2020-0432 CVE-2020-11945 CVE-2020-11996 CVE-2020-12693 CVE-2020-14351 CVE-2020-14385 CVE-2020-14390 CVE-2020-14556 CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581 CVE-2020-14583 CVE-2020-14593 CVE-2020-14621 CVE-2020-16120 CVE-2020-1711 CVE-2020-1749 CVE-2020-25212 CVE-2020-25284 CVE-2020-25285 CVE-2020-25656 CVE-2020-26088 CVE-2020-27673 CVE-2020-27675 CVE-2020-7039 CVE-2020-8517 CVE-2020-8608 CVE-2020-8694 SUSE-SU-2018:2426-1 SUSE-SU-2018:2679-1 SUSE-SU-2020:0143-1 SUSE-SU-2020:0844-1 SUSE-SU-2020:1156-1 SUSE-SU-2020:1420-1 SUSE-SU-2020:1841-1 SUSE-SU-2020:2453-1 SUSE-SU-2020:2598-1 SUSE-SU-2020:2879-1 Platform(s): SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Module for High Performance Computing 15 SP1 SUSE Linux Enterprise Module for Legacy Software 15 SP1 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information xen-4.1.6_02-0.5 is installed OR xen-doc-html-4.1.6_02-0.5 is installed OR xen-doc-pdf-4.1.6_02-0.5 is installed OR xen-kmp-default-4.1.6_02_3.0.93_0.5-0.5 is installed OR xen-kmp-pae-4.1.6_02_3.0.93_0.5-0.5 is installed OR xen-kmp-trace-4.1.6_02_3.0.93_0.5-0.5 is installed OR xen-libs-4.1.6_02-0.5 is installed OR xen-libs-32bit-4.1.6_02-0.5 is installed OR xen-tools-4.1.6_02-0.5 is installed OR xen-tools-domU-4.1.6_02-0.5 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND kvm-1.4.2-0.22.34 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information libpulse-mainloop-glib0-5.0-2 is installed OR libpulse-mainloop-glib0-32bit-5.0-2 is installed OR libpulse0-5.0-2 is installed OR libpulse0-32bit-5.0-2 is installed OR pulseaudio-5.0-2 is installed OR pulseaudio-esound-compat-5.0-2 is installed OR pulseaudio-gdm-hooks-5.0-2 is installed OR pulseaudio-lang-5.0-2 is installed OR pulseaudio-module-bluetooth-5.0-2 is installed OR pulseaudio-module-gconf-5.0-2 is installed OR pulseaudio-module-jack-5.0-2 is installed OR pulseaudio-module-lirc-5.0-2 is installed OR pulseaudio-module-x11-5.0-2 is installed OR pulseaudio-module-zeroconf-5.0-2 is installed OR pulseaudio-utils-5.0-2 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information krb5-1.12.1-19 is installed OR krb5-32bit-1.12.1-19 is installed OR krb5-client-1.12.1-19 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information libXinerama1-1.1.3-3 is installed OR libXinerama1-32bit-1.1.3-3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information expat-2.1.0-20 is installed OR libexpat1-2.1.0-20 is installed OR libexpat1-32bit-2.1.0-20 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information DirectFB-1.7.1-6 is installed OR lib++dfb-1_7-1-1.7.1-6 is installed OR libdirectfb-1_7-1-1.7.1-6 is installed OR libdirectfb-1_7-1-32bit-1.7.1-6 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 is installed AND Package Information libvpx-1.6.1-6.3 is installed OR libvpx-devel-1.6.1-6.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed AND Package Information jasper-2.0.14-3.11 is installed OR libjasper-devel-2.0.14-3.11 is installed Definition Synopsis SUSE Linux Enterprise Module for High Performance Computing 15 SP1 is installed AND Package Information libpmi0-18.08.9-3.13 is installed OR libslurm33-18.08.9-3.13 is installed OR perl-slurm-18.08.9-3.13 is installed OR slurm-18.08.9-3.13 is installed OR slurm-auth-none-18.08.9-3.13 is installed OR slurm-config-18.08.9-3.13 is installed OR slurm-config-man-18.08.9-3.13 is installed OR slurm-devel-18.08.9-3.13 is installed OR slurm-doc-18.08.9-3.13 is installed OR slurm-lua-18.08.9-3.13 is installed OR slurm-munge-18.08.9-3.13 is installed OR slurm-node-18.08.9-3.13 is installed OR slurm-pam_slurm-18.08.9-3.13 is installed OR slurm-plugins-18.08.9-3.13 is installed OR slurm-slurmdbd-18.08.9-3.13 is installed OR slurm-sql-18.08.9-3.13 is installed OR slurm-sview-18.08.9-3.13 is installed OR slurm-torque-18.08.9-3.13 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 SP1 is installed AND Package Information java-1_8_0-ibm-1.8.0_sr6.15-3.41 is installed OR java-1_8_0-ibm-alsa-1.8.0_sr6.15-3.41 is installed OR java-1_8_0-ibm-devel-1.8.0_sr6.15-3.41 is installed OR java-1_8_0-ibm-plugin-1.8.0_sr6.15-3.41 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 is installed AND kernel-livepatch-tools-1.1-5.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND Package Information kernel-default-4.12.14-197.67 is installed OR kernel-default-livepatch-4.12.14-197.67 is installed OR kernel-default-livepatch-devel-4.12.14-197.67 is installed OR kernel-livepatch-4_12_14-197_67-default-1-3.3 is installed OR kernel-livepatch-SLE15-SP1_Update_18-1-3.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 is installed AND Package Information qemu-2.11.2-9.9 is installed OR qemu-arm-2.11.2-9.9 is installed OR qemu-block-curl-2.11.2-9.9 is installed OR qemu-block-iscsi-2.11.2-9.9 is installed OR qemu-block-rbd-2.11.2-9.9 is installed OR qemu-block-ssh-2.11.2-9.9 is installed OR qemu-guest-agent-2.11.2-9.9 is installed OR qemu-ipxe-1.0.0-9.9 is installed OR qemu-kvm-2.11.2-9.9 is installed OR qemu-lang-2.11.2-9.9 is installed OR qemu-ppc-2.11.2-9.9 is installed OR qemu-s390-2.11.2-9.9 is installed OR qemu-seabios-1.11.0-9.9 is installed OR qemu-sgabios-8-9.9 is installed OR qemu-vgabios-1.11.0-9.9 is installed OR qemu-x86-2.11.2-9.9 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed AND Package Information qemu-3.1.1.1-9.14 is installed OR qemu-arm-3.1.1.1-9.14 is installed OR qemu-audio-alsa-3.1.1.1-9.14 is installed OR qemu-audio-oss-3.1.1.1-9.14 is installed OR qemu-audio-pa-3.1.1.1-9.14 is installed OR qemu-block-curl-3.1.1.1-9.14 is installed OR qemu-block-iscsi-3.1.1.1-9.14 is installed OR qemu-block-rbd-3.1.1.1-9.14 is installed OR qemu-block-ssh-3.1.1.1-9.14 is installed OR qemu-guest-agent-3.1.1.1-9.14 is installed OR qemu-ipxe-1.0.0+-9.14 is installed OR qemu-kvm-3.1.1.1-9.14 is installed OR qemu-lang-3.1.1.1-9.14 is installed OR qemu-ppc-3.1.1.1-9.14 is installed OR qemu-s390-3.1.1.1-9.14 is installed OR qemu-seabios-1.12.0-9.14 is installed OR qemu-sgabios-8-9.14 is installed OR qemu-ui-curses-3.1.1.1-9.14 is installed OR qemu-ui-gtk-3.1.1.1-9.14 is installed OR qemu-vgabios-1.12.0-9.14 is installed OR qemu-x86-3.1.1.1-9.14 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND binutils-2.25.0-13 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kgraft-patch-3_12_69-60_64_29-default-6-2 is installed OR kgraft-patch-3_12_69-60_64_29-xen-6-2 is installed OR kgraft-patch-SLE12-SP1_Update_12-6-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information apache2-2.4.23-14 is installed OR apache2-doc-2.4.23-14 is installed OR apache2-example-pages-2.4.23-14 is installed OR apache2-prefork-2.4.23-14 is installed OR apache2-utils-2.4.23-14 is installed OR apache2-worker-2.4.23-14 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information apache2-2.4.23-29.24 is installed OR apache2-doc-2.4.23-29.24 is installed OR apache2-example-pages-2.4.23-29.24 is installed OR apache2-prefork-2.4.23-29.24 is installed OR apache2-utils-2.4.23-29.24 is installed OR apache2-worker-2.4.23-29.24 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information kgraft-patch-4_4_103-92_56-default-11-2 is installed OR kgraft-patch-SLE12-SP2_Update_17-11-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information kgraft-patch-4_4_121-92_80-default-4-2 is installed OR kgraft-patch-SLE12-SP2_Update_22-4-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information crash-7.1.8-3 is installed OR crash-kmp-default-7.1.8_k4.4.73_5-3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-BCL is installed AND Package Information libseccomp-2.4.1-11.3 is installed OR libseccomp2-2.4.1-11.3 is installed OR libseccomp2-32bit-2.4.1-11.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND Package Information libpolkit0-0.113-5.18 is installed OR polkit-0.113-5.18 is installed OR typelib-1_0-Polkit-1_0-0.113-5.18 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information libjavascriptcoregtk-4_0-18-2.24.4-2.47 is installed OR libwebkit2gtk-4_0-37-2.24.4-2.47 is installed OR libwebkit2gtk3-lang-2.24.4-2.47 is installed OR typelib-1_0-JavaScriptCore-4_0-2.24.4-2.47 is installed OR typelib-1_0-WebKit2-4_0-2.24.4-2.47 is installed OR webkit2gtk-4_0-injected-bundles-2.24.4-2.47 is installed OR webkit2gtk3-2.24.4-2.47 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information liblouis-2.6.4-6.6 is installed OR liblouis-data-2.6.4-6.6 is installed OR liblouis9-2.6.4-6.6 is installed OR python-louis-2.6.4-6.6 is installed OR python3-louis-2.6.4-6.6 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information audiofile-0.3.6-10 is installed OR libaudiofile1-0.3.6-10 is installed OR libaudiofile1-32bit-0.3.6-10 is installed Definition Synopsis SUSE Linux Enterprise Server 15-LTSS is installed AND squid-4.11-5.17 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information tomcat-9.0.36-3.60 is installed OR tomcat-admin-webapps-9.0.36-3.60 is installed OR tomcat-el-3_0-api-9.0.36-3.60 is installed OR tomcat-jsp-2_3-api-9.0.36-3.60 is installed OR tomcat-lib-9.0.36-3.60 is installed OR tomcat-servlet-4_0-api-9.0.36-3.60 is installed OR tomcat-webapps-9.0.36-3.60 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP2 is installed AND Package Information kernel-default-5.3.18-24.24 is installed OR kernel-default-extra-5.3.18-24.24 is installed Definition Synopsis SUSE OpenStack Cloud 6 is installed AND Package Information xen-4.5.5_24-22.46 is installed OR xen-doc-html-4.5.5_24-22.46 is installed OR xen-kmp-default-4.5.5_24_k3.12.74_60.64.85-22.46 is installed OR xen-libs-4.5.5_24-22.46 is installed OR xen-libs-32bit-4.5.5_24-22.46 is installed OR xen-tools-4.5.5_24-22.46 is installed OR xen-tools-domU-4.5.5_24-22.46 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND wpa_supplicant-2.6-15.10 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND python-Django-1.11.11-3.3 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND Package Information kernel-default-4.4.180-94.107 is installed OR kernel-default-base-4.4.180-94.107 is installed OR kernel-default-devel-4.4.180-94.107 is installed OR kernel-default-kgraft-4.4.180-94.107 is installed OR kernel-devel-4.4.180-94.107 is installed OR kernel-macros-4.4.180-94.107 is installed OR kernel-source-4.4.180-94.107 is installed OR kernel-syms-4.4.180-94.107 is installed OR kgraft-patch-4_4_180-94_107-default-1-4.3 is installed OR kgraft-patch-SLE12-SP3_Update_29-1-4.3 is installed
BACK