Oval Definition:	oval:org.opensuse.security:def:51266
Revision Date: 2020-12-01 Version: 1 Title: Security update for libvpx (Important) Description: This update for libvpx fixes the following issues: - CVE-2019-2126: Fixed a double free in ParseContentEncodingEntry() (bsc#1160611). - CVE-2019-9325: Fixed an out-of-bounds read (bsc#1160612). - CVE-2019-9232: Fixed an out-of-bounds memory access on fuzzed data (bsc#1160613). - CVE-2019-9433: Fixed a use-after-free in vp8_deblock() (bsc#1160614). - CVE-2019-9371: Fixed a resource exhaustion after memory leak (bsc#1160615). Family: unix Class: patch Status: Reference(s): 1012382 1047238 1050242 1050911 1051510 1053043 1054914 1055117 1055186 1056686 1056787 1058115 1060662 1061840 1061843 1063638 1064597 1064701 1064802 1065600 1065729 1066129 1066369 1068546 1071009 1071306 1071995 1075020 1078248 1082387 1082555 1083647 1085030 1085535 1085536 1085539 1086103 1087092 1090734 1091171 1093205 1099658 1102097 1103992 1104353 1104427 1104902 1106011 1106061 1106284 1106434 1108193 1108382 1108838 1108937 1110946 1111696 1112063 1112894 1112899 1112902 1112903 1112905 1112906 1112907 1113722 1114279 1114427 1114542 1115688 1117158 1117561 1118139 1118689 1119086 1119843 1120091 1120423 1120566 1120843 1120876 1120902 1120937 1122776 1123105 1123454 1123663 1123959 1124370 1124503 1124839 1126356 1127616 1128052 1128503 1128904 1128979 1129138 1129273 1129424 1129497 1129519 1129664 1129693 1129770 1129991 1130267 1130579 1130699 1130972 1131107 1131281 1131326 1131451 1131488 1131565 1131673 1132044 1133021 1133176 1133188 1133190 1133320 1133612 1133616 1134160 1134162 1134199 1134200 1134201 1134202 1134203 1134204 1134205 1134291 1134354 1134393 1134459 1134460 1134461 1134537 1134597 1134651 1134671 1134760 1134806 1134810 1134813 1134848 1134881 1134882 1134936 1135006 1135007 1135008 1135056 1135100 1135120 1135219 1135278 1135281 1135309 1135312 1135314 1135315 1135316 1135320 1135323 1135330 1135350 1135492 1135542 1135556 1135603 1135642 1135661 1135758 1135897 1136206 1136261 1136424 1136428 1136430 1136432 1136434 1136435 1136438 1136439 1136477 1136478 1136573 1136586 1136881 1136935 1136990 1137151 1137152 1137153 1137162 1137372 1137444 1137586 1137739 1137752 1137811 1137884 1138529 1138539 1139020 1139021 1139101 1139500 1140012 1140426 1140487 1141450 1141543 1141554 1142019 1142076 1142109 1142117 1142118 1142119 1142496 1142541 1142635 1142685 1142701 1142857 1143300 1143466 1143765 1143841 1143843 1144123 1144333 1144474 1144518 1144718 1144813 1144880 1144886 1144912 1144920 1144979 1145010 1145051 1145059 1145189 1145235 1145300 1145302 1145388 1145389 1145390 1145391 1145392 1145393 1145394 1145395 1145396 1145397 1145408 1145409 1145661 1145678 1145687 1145920 1145922 1145934 1145937 1145940 1145941 1145942 1146074 1146084 1146163 1146285 1146346 1146351 1146352 1146361 1146376 1146378 1146381 1146391 1146399 1146413 1146425 1146512 1146514 1146516 1146519 1146524 1146526 1146529 1146531 1146543 1146547 1146550 1146575 1146589 1146657 1146678 1146938 1148031 1148032 1148033 1148034 1148035 1148093 1148133 1148192 1148196 1148198 1148202 1148303 1148363 1148379 1148394 1148527 1148574 1148616 1148617 1148619 1148742 1148859 1148868 1149053 1149083 1149104 1149105 1149106 1149197 1149214 1149224 1149325 1149376 1149413 1149418 1149424 1149522 1149527 1149539 1149552 1149591 1149602 1149612 1149626 1149652 1149713 1149940 1149976 1150025 1150033 1150112 1150562 1150727 1150860 1150861 1150933 1152763 1152856 1153921 1154212 1160611 1160612 1160613 1160614 1160615 1160968 1166238 1171746 1172437 1173100 1173576 1173613 1173659 1173661 1173663 1173869 1173942 1173963 1174186 1174247 CVE-2008-4989 CVE-2011-1898 CVE-2011-3200 CVE-2011-4128 CVE-2012-0029 CVE-2012-0217 CVE-2012-0390 CVE-2012-1569 CVE-2012-1573 CVE-2012-2625 CVE-2012-3432 CVE-2012-3433 CVE-2012-4411 CVE-2012-4535 CVE-2012-4536 CVE-2012-4537 CVE-2012-4538 CVE-2012-4539 CVE-2012-4544 CVE-2012-5510 CVE-2012-5511 CVE-2012-5513 CVE-2012-5514 CVE-2012-5515 CVE-2012-5525 CVE-2012-5634 CVE-2012-6075 CVE-2013-0151 CVE-2013-0152 CVE-2013-0153 CVE-2013-1442 CVE-2013-1917 CVE-2013-1918 CVE-2013-1919 CVE-2013-1922 CVE-2013-1952 CVE-2013-2007 CVE-2013-3495 CVE-2013-4355 CVE-2013-4356 CVE-2013-4361 CVE-2013-4375 CVE-2013-4416 CVE-2013-4494 CVE-2013-4540 CVE-2013-4551 CVE-2013-4553 CVE-2013-4554 CVE-2013-4758 CVE-2013-6370 CVE-2013-6371 CVE-2014-0092 CVE-2014-0107 CVE-2014-1959 CVE-2014-3124 CVE-2014-3466 CVE-2014-3634 CVE-2014-6268 CVE-2014-7154 CVE-2014-7155 CVE-2014-7156 CVE-2014-7188 CVE-2017-18551 CVE-2017-18594 CVE-2018-1000199 CVE-2018-12181 CVE-2018-15173 CVE-2018-20976 CVE-2018-21008 CVE-2018-7191 CVE-2019-0155 CVE-2019-0160 CVE-2019-10086 CVE-2019-10124 CVE-2019-10207 CVE-2019-11085 CVE-2019-11477 CVE-2019-11478 CVE-2019-11479 CVE-2019-11486 CVE-2019-11487 CVE-2019-11815 CVE-2019-11833 CVE-2019-11884 CVE-2019-12382 CVE-2019-14814 CVE-2019-14815 CVE-2019-14816 CVE-2019-14835 CVE-2019-14895 CVE-2019-14901 CVE-2019-15030 CVE-2019-15031 CVE-2019-15090 CVE-2019-15098 CVE-2019-15117 CVE-2019-15118 CVE-2019-15211 CVE-2019-15212 CVE-2019-15214 CVE-2019-15215 CVE-2019-15216 CVE-2019-15217 CVE-2019-15218 CVE-2019-15219 CVE-2019-15220 CVE-2019-15221 CVE-2019-15222 CVE-2019-15239 CVE-2019-15290 CVE-2019-15292 CVE-2019-15538 CVE-2019-15666 CVE-2019-15902 CVE-2019-15917 CVE-2019-15919 CVE-2019-15920 CVE-2019-15921 CVE-2019-15924 CVE-2019-15926 CVE-2019-15927 CVE-2019-16746 CVE-2019-19447 CVE-2019-2126 CVE-2019-2894 CVE-2019-2933 CVE-2019-2945 CVE-2019-2949 CVE-2019-2958 CVE-2019-2962 CVE-2019-2964 CVE-2019-2973 CVE-2019-2975 CVE-2019-2978 CVE-2019-2981 CVE-2019-2983 CVE-2019-2987 CVE-2019-2988 CVE-2019-2989 CVE-2019-2992 CVE-2019-2999 CVE-2019-3695 CVE-2019-3696 CVE-2019-3846 CVE-2019-5489 CVE-2019-9232 CVE-2019-9325 CVE-2019-9371 CVE-2019-9433 CVE-2019-9456 CVE-2019-9458 CVE-2020-10757 CVE-2020-11668 CVE-2020-12402 CVE-2020-12415 CVE-2020-12416 CVE-2020-12417 CVE-2020-12418 CVE-2020-12419 CVE-2020-12420 CVE-2020-12421 CVE-2020-12422 CVE-2020-12423 CVE-2020-12424 CVE-2020-12425 CVE-2020-12426 CVE-2020-14331 CVE-2020-15780 CVE-2020-2583 CVE-2020-2590 CVE-2020-2593 CVE-2020-2601 CVE-2020-2604 CVE-2020-2654 CVE-2020-2659 SUSE-SU-2019:0804-1 SUSE-SU-2019:1529-1 SUSE-SU-2019:2245-1 SUSE-SU-2019:2414-1 SUSE-SU-2019:2425-1 SUSE-SU-2019:3238-1 SUSE-SU-2020:0143-1 SUSE-SU-2020:0231-1 SUSE-SU-2020:0357-1 SUSE-SU-2020:1898-1 Platform(s): SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for additional PackageHub packages 15 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Legacy Software 15 SP1 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Web Scripting 15 SP1 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information kernel-default-3.0.101-0.7.17 is installed OR kernel-default-base-3.0.101-0.7.17 is installed OR kernel-default-devel-3.0.101-0.7.17 is installed OR kernel-default-extra-3.0.101-0.7.17 is installed OR kernel-pae-3.0.101-0.7.17 is installed OR kernel-pae-base-3.0.101-0.7.17 is installed OR kernel-pae-devel-3.0.101-0.7.17 is installed OR kernel-pae-extra-3.0.101-0.7.17 is installed OR kernel-source-3.0.101-0.7.17 is installed OR kernel-syms-3.0.101-0.7.17 is installed OR kernel-trace-3.0.101-0.7.17 is installed OR kernel-trace-base-3.0.101-0.7.17 is installed OR kernel-trace-devel-3.0.101-0.7.17 is installed OR kernel-trace-extra-3.0.101-0.7.17 is installed OR kernel-xen-3.0.101-0.7.17 is installed OR kernel-xen-base-3.0.101-0.7.17 is installed OR kernel-xen-devel-3.0.101-0.7.17 is installed OR kernel-xen-extra-3.0.101-0.7.17 is installed OR xen-kmp-default-4.1.6_04_3.0.101_0.7.17-0.5 is installed OR xen-kmp-pae-4.1.6_04_3.0.101_0.7.17-0.5 is installed OR xen-kmp-trace-4.1.6_04_3.0.101_0.7.17-0.5 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information MozillaFirefox-38.3.0esr-22 is installed OR MozillaFirefox-translations-38.3.0esr-22 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information gnutls-3.2.15-1 is installed OR libgnutls28-3.2.15-1 is installed OR libgnutls28-32bit-3.2.15-1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information alsa-1.0.27.2-11 is installed OR libasound2-1.0.27.2-11 is installed OR libasound2-32bit-1.0.27.2-11 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND argyllcms-1.6.3-3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information libXcursor1-1.1.14-3 is installed OR libXcursor1-32bit-1.1.14-3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND autofs-5.0.9-28.3 is installed Definition Synopsis SUSE Linux Enterprise Module for additional PackageHub packages 15 is installed AND Package Information nmap-7.70-3.12 is installed OR nping-7.70-3.12 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed AND Package Information libvpx-1.6.1-6.3 is installed OR libvpx-devel-1.6.1-6.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 SP2 is installed AND Package Information MozillaFirefox-78.0.1-3.94 is installed OR MozillaFirefox-branding-SLE-78-4.14 is installed OR MozillaFirefox-devel-78.0.1-3.94 is installed OR MozillaFirefox-translations-common-78.0.1-3.94 is installed OR MozillaFirefox-translations-other-78.0.1-3.94 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 SP1 is installed AND Package Information java-1_8_0-openjdk-1.8.0.232-3.27 is installed OR java-1_8_0-openjdk-demo-1.8.0.232-3.27 is installed OR java-1_8_0-openjdk-devel-1.8.0.232-3.27 is installed OR java-1_8_0-openjdk-headless-1.8.0.232-3.27 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 is installed AND Package Information kernel-default-4.12.14-150.22 is installed OR kernel-default-livepatch-4.12.14-150.22 is installed OR kernel-livepatch-4_12_14-150_22-default-1-1.5 is installed OR kernel-livepatch-SLE15_Update_11-1-1.5 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND Package Information kernel-livepatch-4_12_14-197_34-default-4-2 is installed OR kernel-livepatch-SLE15-SP1_Update_9-4-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 is installed AND Package Information ovmf-2017+git1510945757.b2662641d5-5.19 is installed OR ovmf-tools-2017+git1510945757.b2662641d5-5.19 is installed OR qemu-ovmf-x86_64-2017+git1510945757.b2662641d5-5.19 is installed OR qemu-uefi-aarch64-2017+git1510945757.b2662641d5-5.19 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 SP1 is installed AND apache-commons-beanutils-1.9.2-4.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information java-1_8_0-openjdk-1.8.0.65-1 is installed OR java-1_8_0-openjdk-demo-1.8.0.65-1 is installed OR java-1_8_0-openjdk-devel-1.8.0.65-1 is installed OR java-1_8_0-openjdk-headless-1.8.0.65-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kgraft-patch-3_12_74-60_64_51-default-2-2 is installed OR kgraft-patch-3_12_74-60_64_51-xen-2-2 is installed OR kgraft-patch-SLE12-SP1_Update_18-2-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information gnome-settings-daemon-3.20.1-40 is installed OR gnome-settings-daemon-lang-3.20.1-40 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information gnutls-3.2.15-18.6 is installed OR libgnutls-openssl27-3.2.15-18.6 is installed OR libgnutls28-3.2.15-18.6 is installed OR libgnutls28-32bit-3.2.15-18.6 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information openssh-7.2p2-74.42 is installed OR openssh-askpass-gnome-7.2p2-74.42 is installed OR openssh-fips-7.2p2-74.42 is installed OR openssh-helpers-7.2p2-74.42 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information git-2.12.3-27.14 is installed OR git-core-2.12.3-27.14 is installed OR git-doc-2.12.3-27.14 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information DirectFB-1.7.1-6 is installed OR lib++dfb-1_7-1-1.7.1-6 is installed OR libdirectfb-1_7-1-1.7.1-6 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-BCL is installed AND ucode-intel-20191112a-13.56 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND Package Information kgraft-patch-4_4_156-94_64-default-7-2 is installed OR kgraft-patch-SLE12-SP3_Update_20-7-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information ghostscript-9.27-23.28 is installed OR ghostscript-x11-9.27-23.28 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information libgcrypt-1.6.1-16.58 is installed OR libgcrypt20-1.6.1-16.58 is installed OR libgcrypt20-32bit-1.6.1-16.58 is installed OR libgcrypt20-hmac-1.6.1-16.58 is installed OR libgcrypt20-hmac-32bit-1.6.1-16.58 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information glibc-2.22-15 is installed OR glibc-32bit-2.22-15 is installed OR glibc-devel-2.22-15 is installed OR glibc-devel-32bit-2.22-15 is installed OR glibc-html-2.22-15 is installed OR glibc-i18ndata-2.22-15 is installed OR glibc-info-2.22-15 is installed OR glibc-locale-2.22-15 is installed OR glibc-locale-32bit-2.22-15 is installed OR glibc-profile-2.22-15 is installed OR glibc-profile-32bit-2.22-15 is installed OR nscd-2.22-15 is installed Definition Synopsis SUSE Linux Enterprise Server 15-LTSS is installed AND Package Information java-1_8_0-openjdk-1.8.0.242-3.30 is installed OR java-1_8_0-openjdk-demo-1.8.0.242-3.30 is installed OR java-1_8_0-openjdk-devel-1.8.0.242-3.30 is installed OR java-1_8_0-openjdk-headless-1.8.0.242-3.30 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information libpcp-devel-3.11.9-5.8 is installed OR libpcp3-3.11.9-5.8 is installed OR libpcp_gui2-3.11.9-5.8 is installed OR libpcp_import1-3.11.9-5.8 is installed OR libpcp_mmv1-3.11.9-5.8 is installed OR libpcp_trace2-3.11.9-5.8 is installed OR libpcp_web1-3.11.9-5.8 is installed OR pcp-3.11.9-5.8 is installed OR pcp-conf-3.11.9-5.8 is installed OR pcp-devel-3.11.9-5.8 is installed OR pcp-doc-3.11.9-5.8 is installed OR pcp-import-iostat2pcp-3.11.9-5.8 is installed OR pcp-import-mrtg2pcp-3.11.9-5.8 is installed OR pcp-import-sar2pcp-3.11.9-5.8 is installed OR perl-PCP-LogImport-3.11.9-5.8 is installed OR perl-PCP-LogSummary-3.11.9-5.8 is installed OR perl-PCP-MMV-3.11.9-5.8 is installed OR perl-PCP-PMDA-3.11.9-5.8 is installed OR python-pcp-3.11.9-5.8 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND Package Information evince-3.20.2-6.27 is installed OR evince-browser-plugin-3.20.2-6.27 is installed OR evince-lang-3.20.2-6.27 is installed OR evince-plugin-djvudocument-3.20.2-6.27 is installed OR evince-plugin-dvidocument-3.20.2-6.27 is installed OR evince-plugin-pdfdocument-3.20.2-6.27 is installed OR evince-plugin-psdocument-3.20.2-6.27 is installed OR evince-plugin-tiffdocument-3.20.2-6.27 is installed OR evince-plugin-xpsdocument-3.20.2-6.27 is installed OR libevdocument3-4-3.20.2-6.27 is installed OR libevview3-3-3.20.2-6.27 is installed OR nautilus-evince-3.20.2-6.27 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND Package Information bzip2-1.0.6-30.8 is installed OR bzip2-doc-1.0.6-30.8 is installed OR libbz2-1-1.0.6-30.8 is installed OR libbz2-1-32bit-1.0.6-30.8 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND Package Information libgcrypt-1.6.1-16.68 is installed OR libgcrypt20-1.6.1-16.68 is installed OR libgcrypt20-32bit-1.6.1-16.68 is installed OR libgcrypt20-hmac-1.6.1-16.68 is installed OR libgcrypt20-hmac-32bit-1.6.1-16.68 is installed
BACK