Oval Definition:	oval:org.opensuse.security:def:51344
Revision Date: 2020-12-01 Version: 1 Title: Security update for tigervnc (Critical) Description: This update for tigervnc fixes the following issues: - CVE-2020-26117: Server certificates were stored as certiticate authorities, allowing malicious owners of these certificates to impersonate any server after a client had added an exception (bsc#1176733) Family: unix Class: patch Status: Reference(s): 1097975 1103200 1103203 1103206 1117993 1123710 1125401 1127223 1127308 1131330 1133191 1136446 1136935 1137597 1160467 1160468 1169740 1171252 1171254 1171355 1171928 1172651 1173334 1173455 1174157 1175664 1175665 1175671 1175992 1176012 1176072 1176382 1176733 1176896 1177513 1177727 1177729 992038 CVE-2009-2624 CVE-2009-2694 CVE-2009-2703 CVE-2009-3026 CVE-2009-3083 CVE-2009-3084 CVE-2009-3085 CVE-2009-3615 CVE-2009-5155 CVE-2010-0001 CVE-2010-0013 CVE-2010-0277 CVE-2010-0420 CVE-2010-0423 CVE-2010-1624 CVE-2010-2528 CVE-2010-3711 CVE-2011-1091 CVE-2011-1521 CVE-2011-3389 CVE-2011-3594 CVE-2011-3630 CVE-2011-3631 CVE-2011-3632 CVE-2011-4944 CVE-2012-0845 CVE-2012-1150 CVE-2012-2214 CVE-2012-3374 CVE-2012-6152 CVE-2013-0271 CVE-2013-0272 CVE-2013-0273 CVE-2013-0274 CVE-2013-1752 CVE-2013-1753 CVE-2013-4238 CVE-2013-6477 CVE-2013-6478 CVE-2013-6479 CVE-2013-6481 CVE-2013-6482 CVE-2013-6483 CVE-2013-6484 CVE-2013-6485 CVE-2013-6486 CVE-2013-6487 CVE-2014-0020 CVE-2014-1912 CVE-2014-3695 CVE-2014-3696 CVE-2014-3698 CVE-2014-4650 CVE-2018-5804 CVE-2018-5813 CVE-2018-5815 CVE-2018-5816 CVE-2018-8956 CVE-2019-11477 CVE-2019-11478 CVE-2019-11487 CVE-2019-14896 CVE-2019-14897 CVE-2019-3846 CVE-2019-9169 CVE-2020-0431 CVE-2020-11868 CVE-2020-12351 CVE-2020-12653 CVE-2020-12654 CVE-2020-13817 CVE-2020-14381 CVE-2020-14386 CVE-2020-14556 CVE-2020-14562 CVE-2020-14573 CVE-2020-14577 CVE-2020-14581 CVE-2020-14583 CVE-2020-14593 CVE-2020-14621 CVE-2020-15025 CVE-2020-15049 CVE-2020-15810 CVE-2020-15811 CVE-2020-24394 CVE-2020-24490 CVE-2020-24606 CVE-2020-25212 CVE-2020-25645 CVE-2020-26117 CVE-2020-9484 SUSE-SU-2019:0005-1 SUSE-SU-2019:1877-1 SUSE-SU-2020:1364-1 SUSE-SU-2020:1823-1 SUSE-SU-2020:2143-1 SUSE-SU-2020:2442-1 SUSE-SU-2020:2880-1 SUSE-SU-2020:3389-1 Platform(s): openSUSE Leap 15.0 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Module for additional PackageHub packages 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Module for Live Patching 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Workstation Extension 15 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND Package Information gdk-pixbuf-loader-rsvg-2.42.3-lp150.1 is installed OR librsvg-2-2-2.42.3-lp150.1 is installed OR rsvg-thumbnailer-2.42.3-lp150.1 is installed OR typelib-1_0-Rsvg-2_0-2.42.3-lp150.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information bytefx-data-mysql-2.6.7-0.9 is installed OR ibm-data-db2-2.6.7-0.9 is installed OR mono-core-2.6.7-0.9 is installed OR mono-data-2.6.7-0.9 is installed OR mono-data-firebird-2.6.7-0.9 is installed OR mono-data-oracle-2.6.7-0.9 is installed OR mono-data-postgresql-2.6.7-0.9 is installed OR mono-data-sqlite-2.6.7-0.9 is installed OR mono-data-sybase-2.6.7-0.9 is installed OR mono-devel-2.6.7-0.9 is installed OR mono-extras-2.6.7-0.9 is installed OR mono-jscript-2.6.7-0.9 is installed OR mono-locale-extras-2.6.7-0.9 is installed OR mono-nunit-2.6.7-0.9 is installed OR mono-wcf-2.6.7-0.9 is installed OR mono-web-2.6.7-0.9 is installed OR mono-winforms-2.6.7-0.9 is installed OR monodoc-core-2.6.7-0.9 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND cabextract-1.2-2.12 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information MozillaFirefox-31.8.0esr-0.13 is installed OR MozillaFirefox-translations-31.8.0esr-0.13 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information libpython2_7-1_0-2.7.7-2 is installed OR libpython2_7-1_0-32bit-2.7.7-2 is installed OR python-base-2.7.7-2 is installed OR python-devel-2.7.7-2 is installed OR python-xml-2.7.7-2 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information finch-2.10.9-8 is installed OR libpurple-2.10.9-8 is installed OR libpurple-lang-2.10.9-8 is installed OR libpurple-meanwhile-2.10.9-8 is installed OR libpurple-tcl-2.10.9-8 is installed OR pidgin-2.10.9-8 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND bogofilter-1.2.4-5 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information cpp48-4.8.5-30 is installed OR gcc48-4.8.5-30 is installed OR gcc48-32bit-4.8.5-30 is installed OR gcc48-c++-4.8.5-30 is installed OR gcc48-gij-4.8.5-30 is installed OR gcc48-gij-32bit-4.8.5-30 is installed OR gcc48-info-4.8.5-30 is installed OR libasan0-4.8.5-30 is installed OR libasan0-32bit-4.8.5-30 is installed OR libgcj48-4.8.5-30 is installed OR libgcj48-32bit-4.8.5-30 is installed OR libgcj48-jar-4.8.5-30 is installed OR libgcj_bc1-4.8.5-30 is installed OR libstdc++48-devel-4.8.5-30 is installed OR libstdc++48-devel-32bit-4.8.5-30 is installed Definition Synopsis SUSE Linux Enterprise Module for additional PackageHub packages 15 SP2 is installed AND Package Information java-11-openjdk-11.0.8.0-3.45 is installed OR java-11-openjdk-javadoc-11.0.8.0-3.45 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 SP2 is installed AND Package Information libXvnc-devel-1.9.0-19.9 is installed OR tigervnc-1.9.0-19.9 is installed Definition Synopsis SUSE Linux Enterprise Module for Development Tools 15 is installed AND Package Information glibc-2.26-13.24 is installed OR glibc-devel-32bit-2.26-13.24 is installed OR glibc-devel-static-2.26-13.24 is installed OR glibc-utils-2.26-13.24 is installed OR glibc-utils-src-2.26-13.24 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 is installed AND Package Information kernel-livepatch-4_12_14-150_14-default-2-2 is installed OR kernel-livepatch-SLE15_Update_9-2-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND Package Information kernel-livepatch-4_12_14-197_21-default-4-2 is installed OR kernel-livepatch-SLE15-SP1_Update_6-4-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP2 is installed AND Package Information kernel-livepatch-5_3_18-24_9-default-4-2 is installed OR kernel-livepatch-SLE15-SP2_Update_1-4-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed AND squid-4.13-5.23 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information libqt4-4.8.6-4 is installed OR libqt4-32bit-4.8.6-4 is installed OR libqt4-qt3support-4.8.6-4 is installed OR libqt4-qt3support-32bit-4.8.6-4 is installed OR libqt4-sql-4.8.6-4 is installed OR libqt4-sql-32bit-4.8.6-4 is installed OR libqt4-sql-mysql-4.8.6-4 is installed OR libqt4-sql-sqlite-4.8.6-4 is installed OR libqt4-x11-4.8.6-4 is installed OR libqt4-x11-32bit-4.8.6-4 is installed OR qt4-x11-tools-4.8.6-4 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information xorg-x11-server-7.6_1.15.2-53.3 is installed OR xorg-x11-server-extra-7.6_1.15.2-53.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND ft2demos-2.6.3-7.8 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information glibc-2.22-62.13 is installed OR glibc-32bit-2.22-62.13 is installed OR glibc-devel-2.22-62.13 is installed OR glibc-devel-32bit-2.22-62.13 is installed OR glibc-html-2.22-62.13 is installed OR glibc-i18ndata-2.22-62.13 is installed OR glibc-info-2.22-62.13 is installed OR glibc-locale-2.22-62.13 is installed OR glibc-locale-32bit-2.22-62.13 is installed OR glibc-profile-2.22-62.13 is installed OR glibc-profile-32bit-2.22-62.13 is installed OR nscd-2.22-62.13 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information libdcerpc-atsvc0-4.2.4-28.29 is installed OR samba-4.2.4-28.29 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information kgraft-patch-4_4_121-92_80-default-5-2 is installed OR kgraft-patch-SLE12-SP2_Update_22-5-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information avahi-0.6.32-30 is installed OR avahi-lang-0.6.32-30 is installed OR avahi-utils-0.6.32-30 is installed OR libavahi-client3-0.6.32-30 is installed OR libavahi-client3-32bit-0.6.32-30 is installed OR libavahi-common3-0.6.32-30 is installed OR libavahi-common3-32bit-0.6.32-30 is installed OR libavahi-core7-0.6.32-30 is installed OR libdns_sd-0.6.32-30 is installed OR libdns_sd-32bit-0.6.32-30 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-BCL is installed AND Package Information glib2-2.48.2-12.15 is installed OR glib2-lang-2.48.2-12.15 is installed OR glib2-tools-2.48.2-12.15 is installed OR libgio-2_0-0-2.48.2-12.15 is installed OR libgio-2_0-0-32bit-2.48.2-12.15 is installed OR libglib-2_0-0-2.48.2-12.15 is installed OR libglib-2_0-0-32bit-2.48.2-12.15 is installed OR libgmodule-2_0-0-2.48.2-12.15 is installed OR libgmodule-2_0-0-32bit-2.48.2-12.15 is installed OR libgobject-2_0-0-2.48.2-12.15 is installed OR libgobject-2_0-0-32bit-2.48.2-12.15 is installed OR libgthread-2_0-0-2.48.2-12.15 is installed OR libgthread-2_0-0-32bit-2.48.2-12.15 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND Package Information kgraft-patch-4_4_180-94_100-default-3-2 is installed OR kgraft-patch-SLE12-SP3_Update_27-3-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information kgraft-patch-4_4_156-94_57-default-7-2 is installed OR kgraft-patch-SLE12-SP3_Update_18-7-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information libgcrypt-1.6.1-16.58 is installed OR libgcrypt20-1.6.1-16.58 is installed OR libgcrypt20-32bit-1.6.1-16.58 is installed OR libgcrypt20-hmac-1.6.1-16.58 is installed OR libgcrypt20-hmac-32bit-1.6.1-16.58 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information libdcerpc-binding0-4.6.16+git.124.aee309c5c18-3.32 is installed OR libdcerpc-binding0-32bit-4.6.16+git.124.aee309c5c18-3.32 is installed OR libdcerpc0-4.6.16+git.124.aee309c5c18-3.32 is installed OR libdcerpc0-32bit-4.6.16+git.124.aee309c5c18-3.32 is installed OR libndr-krb5pac0-4.6.16+git.124.aee309c5c18-3.32 is installed OR libndr-krb5pac0-32bit-4.6.16+git.124.aee309c5c18-3.32 is installed OR libndr-nbt0-4.6.16+git.124.aee309c5c18-3.32 is installed OR libndr-nbt0-32bit-4.6.16+git.124.aee309c5c18-3.32 is installed OR libndr-standard0-4.6.16+git.124.aee309c5c18-3.32 is installed OR libndr-standard0-32bit-4.6.16+git.124.aee309c5c18-3.32 is installed OR libndr0-4.6.16+git.124.aee309c5c18-3.32 is installed OR libndr0-32bit-4.6.16+git.124.aee309c5c18-3.32 is installed OR libnetapi0-4.6.16+git.124.aee309c5c18-3.32 is installed OR libnetapi0-32bit-4.6.16+git.124.aee309c5c18-3.32 is installed OR libsamba-credentials0-4.6.16+git.124.aee309c5c18-3.32 is installed OR libsamba-credentials0-32bit-4.6.16+git.124.aee309c5c18-3.32 is installed OR libsamba-errors0-4.6.16+git.124.aee309c5c18-3.32 is installed OR libsamba-errors0-32bit-4.6.16+git.124.aee309c5c18-3.32 is installed OR libsamba-hostconfig0-4.6.16+git.124.aee309c5c18-3.32 is installed OR libsamba-hostconfig0-32bit-4.6.16+git.124.aee309c5c18-3.32 is installed OR libsamba-passdb0-4.6.16+git.124.aee309c5c18-3.32 is installed OR libsamba-passdb0-32bit-4.6.16+git.124.aee309c5c18-3.32 is installed OR libsamba-util0-4.6.16+git.124.aee309c5c18-3.32 is installed OR libsamba-util0-32bit-4.6.16+git.124.aee309c5c18-3.32 is installed OR libsamdb0-4.6.16+git.124.aee309c5c18-3.32 is installed OR libsamdb0-32bit-4.6.16+git.124.aee309c5c18-3.32 is installed OR libsmbclient0-4.6.16+git.124.aee309c5c18-3.32 is installed OR libsmbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32 is installed OR libsmbconf0-4.6.16+git.124.aee309c5c18-3.32 is installed OR libsmbconf0-32bit-4.6.16+git.124.aee309c5c18-3.32 is installed OR libsmbldap0-4.6.16+git.124.aee309c5c18-3.32 is installed OR libsmbldap0-32bit-4.6.16+git.124.aee309c5c18-3.32 is installed OR libtevent-util0-4.6.16+git.124.aee309c5c18-3.32 is installed OR libtevent-util0-32bit-4.6.16+git.124.aee309c5c18-3.32 is installed OR libwbclient0-4.6.16+git.124.aee309c5c18-3.32 is installed OR libwbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32 is installed OR samba-4.6.16+git.124.aee309c5c18-3.32 is installed OR samba-client-4.6.16+git.124.aee309c5c18-3.32 is installed OR samba-client-32bit-4.6.16+git.124.aee309c5c18-3.32 is installed OR samba-doc-4.6.16+git.124.aee309c5c18-3.32 is installed OR samba-libs-4.6.16+git.124.aee309c5c18-3.32 is installed OR samba-libs-32bit-4.6.16+git.124.aee309c5c18-3.32 is installed OR samba-winbind-4.6.16+git.124.aee309c5c18-3.32 is installed OR samba-winbind-32bit-4.6.16+git.124.aee309c5c18-3.32 is installed Definition Synopsis SUSE Linux Enterprise Server 15-LTSS is installed AND ntp-4.2.8p15-4.10 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information tomcat-9.0.35-3.52 is installed OR tomcat-admin-webapps-9.0.35-3.52 is installed OR tomcat-el-3_0-api-9.0.35-3.52 is installed OR tomcat-jsp-2_3-api-9.0.35-3.52 is installed OR tomcat-lib-9.0.35-3.52 is installed OR tomcat-servlet-4_0-api-9.0.35-3.52 is installed OR tomcat-webapps-9.0.35-3.52 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information libraw-0.18.9-3.5 is installed OR libraw-devel-0.18.9-3.5 is installed OR libraw16-0.18.9-3.5 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND Package Information java-1_8_0-ibm-1.8.0_sr5.15-30.33 is installed OR java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33 is installed OR java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33 is installed OR java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND Package Information libsolv-0.6.36-2.16 is installed OR libsolv-tools-0.6.36-2.16 is installed OR libzypp-16.20.0-2.39 is installed OR perl-solv-0.6.36-2.16 is installed OR python-solv-0.6.36-2.16 is installed OR zypper-1.13.51-21.26 is installed OR zypper-log-1.13.51-21.26 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND Package Information libpython3_4m1_0-3.4.6-25.29 is installed OR python3-3.4.6-25.29 is installed OR python3-base-3.4.6-25.29 is installed OR python3-curses-3.4.6-25.29 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 9 is installed AND Package Information ruby2.1-rubygem-loofah-2.0.2-3.8 is installed OR rubygem-loofah-2.0.2-3.8 is installed
BACK