Oval Definition:oval:org.opensuse.security:def:51437
Revision Date:2020-12-01Version:1
Title:Security update for glibc (Moderate)
Description:

This update for glibc fixes the following issues:

Security issue fixed:

- CVE-2016-10739: Fixed an improper implementation of getaddrinfo function which could allow applications to incorrectly assume that had parsed a valid string, without the possibility of embedded HTTP headers or other potentially dangerous substrings (bsc#1122729).

Other issue fixed:

- Fixed an issue where pthread_mutex_trylock did not use a correct order of instructions while maintained the robust mutex list due to missing compiler barriers (bsc#1130045). - Added new Japanese Era name support (bsc#1100396).
Family:unixClass:patch
Status:Reference(s):1100396
1103203
1122729
1129991
1130045
1132728
1132729
1132732
1133135
1135656
1152763
1153611
1153921
1157465
1158940
1159118
1160467
1160468
1160931
1162327
1162504
1162689
1162691
1164903
1165425
1167373
1168326
1168352
1169659
1169832
1170313
1170826
1171252
1171254
1171863
1171864
1171866
1172348
1172868
1173942
1173963
1174153
1174186
1174191
1174247
1174910
1174913
1174977
CVE-2007-5970
CVE-2008-7247
CVE-2009-0186
CVE-2009-4019
CVE-2009-4028
CVE-2009-4030
CVE-2010-2891
CVE-2010-5298
CVE-2011-2483
CVE-2011-2696
CVE-2011-3177
CVE-2012-5615
CVE-2013-1976
CVE-2014-0195
CVE-2014-0198
CVE-2014-0221
CVE-2014-0224
CVE-2014-2494
CVE-2014-3470
CVE-2014-4207
CVE-2014-4258
CVE-2014-4260
CVE-2014-4274
CVE-2014-4287
CVE-2014-6463
CVE-2014-6464
CVE-2014-6469
CVE-2014-6474
CVE-2014-6478
CVE-2014-6484
CVE-2014-6489
CVE-2014-6491
CVE-2014-6494
CVE-2014-6495
CVE-2014-6496
CVE-2014-6500
CVE-2014-6505
CVE-2014-6507
CVE-2014-6520
CVE-2014-6530
CVE-2014-6551
CVE-2014-6555
CVE-2014-6559
CVE-2014-6564
CVE-2014-6568
CVE-2014-8964
CVE-2014-9496
CVE-2015-0374
CVE-2015-0381
CVE-2015-0382
CVE-2015-0391
CVE-2015-0411
CVE-2015-0432
CVE-2015-0433
CVE-2015-0441
CVE-2015-0499
CVE-2015-0501
CVE-2015-0505
CVE-2015-2325
CVE-2015-2326
CVE-2015-2568
CVE-2015-2571
CVE-2015-2573
CVE-2015-3152
CVE-2016-10739
CVE-2018-3639
CVE-2019-12519
CVE-2019-12521
CVE-2019-12528
CVE-2019-14896
CVE-2019-14897
CVE-2019-17361
CVE-2019-18860
CVE-2019-18897
CVE-2019-2602
CVE-2019-2684
CVE-2019-2698
CVE-2019-3695
CVE-2019-3696
CVE-2019-9458
CVE-2020-10543
CVE-2020-10878
CVE-2020-11668
CVE-2020-11945
CVE-2020-12653
CVE-2020-12654
CVE-2020-12723
CVE-2020-14039
CVE-2020-14331
CVE-2020-14361
CVE-2020-14362
CVE-2020-15586
CVE-2020-15780
CVE-2020-16845
CVE-2020-7064
CVE-2020-7066
CVE-2020-8517
SUSE-SU-2019:0903-1
SUSE-SU-2019:1211-1
SUSE-SU-2020:0357-1
SUSE-SU-2020:0684-1
SUSE-SU-2020:1156-1
SUSE-SU-2020:1199-1
SUSE-SU-2020:1682-1
SUSE-SU-2020:2452-1
SUSE-SU-2020:2562-1
Platform(s):openSUSE Leap 15.0
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 11 SP4
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise Module for additional PackageHub packages 15
SUSE Linux Enterprise Module for additional PackageHub packages 15 SP2
SUSE Linux Enterprise Module for Development Tools 15
SUSE Linux Enterprise Module for Development Tools 15 SP1
SUSE Linux Enterprise Module for Live Patching 15
SUSE Linux Enterprise Module for Live Patching 15 SP1
SUSE Linux Enterprise Module for Python2 packages 15 SP1
SUSE Linux Enterprise Module for Web Scripting 15 SP1
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP1-LTSS
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP2-BCL
SUSE Linux Enterprise Server 12 SP2-ESPOS
SUSE Linux Enterprise Server 12 SP2-LTSS
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-BCL
SUSE Linux Enterprise Server 12 SP3-ESPOS
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Workstation Extension 15 SP2
SUSE OpenStack Cloud 7
SUSE OpenStack Cloud 8
SUSE OpenStack Cloud 9
SUSE OpenStack Cloud Crowbar 8
Product(s):
Definition Synopsis
  • openSUSE Leap 15.0 is installed
  • AND libexempi3-2.4.5-lp150.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP3 is installed
  • AND Package Information
  • MozillaFirefox-31.8.0esr-0.13 is installed
  • OR MozillaFirefox-translations-31.8.0esr-0.13 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP4 is installed
  • AND Package Information
  • libopenssl0_9_8-0.9.8j-0.80 is installed
  • OR libopenssl0_9_8-32bit-0.9.8j-0.80 is installed
  • OR openssl-0.9.8j-0.80 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 is installed
  • AND yast2-core-3.1.11-1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP1 is installed
  • AND Package Information
  • libmysqlclient18-10.0.21-1 is installed
  • OR libmysqlclient18-32bit-10.0.21-1 is installed
  • OR libmysqlclient_r18-10.0.21-1 is installed
  • OR libmysqlclient_r18-32bit-10.0.21-1 is installed
  • OR mariadb-10.0.21-1 is installed
  • OR mariadb-client-10.0.21-1 is installed
  • OR mariadb-errormessages-10.0.21-1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP2 is installed
  • AND Package Information
  • expat-2.1.0-17 is installed
  • OR libexpat1-2.1.0-17 is installed
  • OR libexpat1-32bit-2.1.0-17 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • AND dnsmasq-2.76-17 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP4 is installed
  • AND SuSEfirewall2-3.6.312.333-3.13 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for additional PackageHub packages 15 is installed
  • AND Package Information
  • java-1_8_0-openjdk-1.8.0.212-3.19 is installed
  • OR java-1_8_0-openjdk-javadoc-1.8.0.212-3.19 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for additional PackageHub packages 15 SP2 is installed
  • AND Package Information
  • perl-5.26.1-7.12 is installed
  • OR perl-32bit-5.26.1-7.12 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Development Tools 15 is installed
  • AND Package Information
  • glibc-2.26-13.19 is installed
  • OR glibc-devel-32bit-2.26-13.19 is installed
  • OR glibc-devel-static-2.26-13.19 is installed
  • OR glibc-utils-2.26-13.19 is installed
  • OR glibc-utils-src-2.26-13.19 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed
  • AND Package Information
  • go1.14-1.14.7-1.15 is installed
  • OR go1.14-doc-1.14.7-1.15 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Live Patching 15 is installed
  • AND Package Information
  • kernel-livepatch-4_12_14-150_17-default-7-2 is installed
  • OR kernel-livepatch-SLE15_Update_10-7-2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed
  • AND Package Information
  • kernel-livepatch-4_12_14-197_18-default-6-2 is installed
  • OR kernel-livepatch-SLE15-SP1_Update_5-6-2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Python2 packages 15 SP1 is installed
  • AND Package Information
  • python2-salt-2019.2.0-6.24 is installed
  • OR salt-2019.2.0-6.24 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Web Scripting 15 SP1 is installed
  • AND Package Information
  • apache2-mod_php7-7.2.5-4.55 is installed
  • OR libtidy5-5.4.0-3.2 is installed
  • OR php7-7.2.5-4.55 is installed
  • OR php7-bcmath-7.2.5-4.55 is installed
  • OR php7-bz2-7.2.5-4.55 is installed
  • OR php7-calendar-7.2.5-4.55 is installed
  • OR php7-ctype-7.2.5-4.55 is installed
  • OR php7-curl-7.2.5-4.55 is installed
  • OR php7-dba-7.2.5-4.55 is installed
  • OR php7-devel-7.2.5-4.55 is installed
  • OR php7-dom-7.2.5-4.55 is installed
  • OR php7-enchant-7.2.5-4.55 is installed
  • OR php7-exif-7.2.5-4.55 is installed
  • OR php7-fastcgi-7.2.5-4.55 is installed
  • OR php7-fileinfo-7.2.5-4.55 is installed
  • OR php7-fpm-7.2.5-4.55 is installed
  • OR php7-ftp-7.2.5-4.55 is installed
  • OR php7-gd-7.2.5-4.55 is installed
  • OR php7-gettext-7.2.5-4.55 is installed
  • OR php7-gmp-7.2.5-4.55 is installed
  • OR php7-iconv-7.2.5-4.55 is installed
  • OR php7-intl-7.2.5-4.55 is installed
  • OR php7-json-7.2.5-4.55 is installed
  • OR php7-ldap-7.2.5-4.55 is installed
  • OR php7-mbstring-7.2.5-4.55 is installed
  • OR php7-mysql-7.2.5-4.55 is installed
  • OR php7-odbc-7.2.5-4.55 is installed
  • OR php7-opcache-7.2.5-4.55 is installed
  • OR php7-openssl-7.2.5-4.55 is installed
  • OR php7-pcntl-7.2.5-4.55 is installed
  • OR php7-pdo-7.2.5-4.55 is installed
  • OR php7-pear-7.2.5-4.55 is installed
  • OR php7-pear-Archive_Tar-7.2.5-4.55 is installed
  • OR php7-pgsql-7.2.5-4.55 is installed
  • OR php7-phar-7.2.5-4.55 is installed
  • OR php7-posix-7.2.5-4.55 is installed
  • OR php7-readline-7.2.5-4.55 is installed
  • OR php7-shmop-7.2.5-4.55 is installed
  • OR php7-snmp-7.2.5-4.55 is installed
  • OR php7-soap-7.2.5-4.55 is installed
  • OR php7-sockets-7.2.5-4.55 is installed
  • OR php7-sodium-7.2.5-4.55 is installed
  • OR php7-sqlite-7.2.5-4.55 is installed
  • OR php7-sysvmsg-7.2.5-4.55 is installed
  • OR php7-sysvsem-7.2.5-4.55 is installed
  • OR php7-sysvshm-7.2.5-4.55 is installed
  • OR php7-tidy-7.2.5-4.55 is installed
  • OR php7-tokenizer-7.2.5-4.55 is installed
  • OR php7-wddx-7.2.5-4.55 is installed
  • OR php7-xmlreader-7.2.5-4.55 is installed
  • OR php7-xmlrpc-7.2.5-4.55 is installed
  • OR php7-xmlwriter-7.2.5-4.55 is installed
  • OR php7-xsl-7.2.5-4.55 is installed
  • OR php7-zip-7.2.5-4.55 is installed
  • OR php7-zlib-7.2.5-4.55 is installed
  • OR tidy-5.4.0-3.2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1 is installed
  • AND Package Information
  • tigervnc-1.4.3-7 is installed
  • OR xorg-x11-Xvnc-1.4.3-7 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1-LTSS is installed
  • AND Package Information
  • kgraft-patch-3_12_69-60_64_29-default-6-2 is installed
  • OR kgraft-patch-3_12_69-60_64_29-xen-6-2 is installed
  • OR kgraft-patch-SLE12-SP1_Update_12-6-2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2 is installed
  • AND Package Information
  • curl-7.37.0-31 is installed
  • OR libcurl4-7.37.0-31 is installed
  • OR libcurl4-32bit-7.37.0-31 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-BCL is installed
  • AND Package Information
  • java-1_8_0-openjdk-1.8.0.171-27.19 is installed
  • OR java-1_8_0-openjdk-demo-1.8.0.171-27.19 is installed
  • OR java-1_8_0-openjdk-devel-1.8.0.171-27.19 is installed
  • OR java-1_8_0-openjdk-headless-1.8.0.171-27.19 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
  • AND Package Information
  • libmysqlclient18-10.0.35-29.20 is installed
  • OR libmysqlclient18-32bit-10.0.35-29.20 is installed
  • OR mariadb-10.0.35-29.20 is installed
  • OR mariadb-client-10.0.35-29.20 is installed
  • OR mariadb-errormessages-10.0.35-29.20 is installed
  • OR mariadb-tools-10.0.35-29.20 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-LTSS is installed
  • AND Package Information
  • kgraft-patch-4_4_74-92_29-default-11-2 is installed
  • OR kgraft-patch-SLE12-SP2_Update_10-11-2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND apache2-mod_perl-2.0.8-11 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-BCL is installed
  • AND Package Information
  • kernel-default-4.4.180-94.107 is installed
  • OR kernel-default-base-4.4.180-94.107 is installed
  • OR kernel-default-devel-4.4.180-94.107 is installed
  • OR kernel-devel-4.4.180-94.107 is installed
  • OR kernel-macros-4.4.180-94.107 is installed
  • OR kernel-source-4.4.180-94.107 is installed
  • OR kernel-syms-4.4.180-94.107 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-ESPOS is installed
  • AND Package Information
  • MozillaFirefox-60.9.0-109.86 is installed
  • OR MozillaFirefox-translations-common-60.9.0-109.86 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-LTSS is installed
  • AND Package Information
  • dovecot22-2.2.31-19.17 is installed
  • OR dovecot22-backend-mysql-2.2.31-19.17 is installed
  • OR dovecot22-backend-pgsql-2.2.31-19.17 is installed
  • OR dovecot22-backend-sqlite-2.2.31-19.17 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
  • AND Package Information
  • libtiff5-4.0.9-44.21 is installed
  • OR libtiff5-32bit-4.0.9-44.21 is installed
  • OR tiff-4.0.9-44.21 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND apache-commons-httpclient-3.1-4 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server for SAP Applications 15 is installed
  • AND squid-4.11-5.17 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 15 SP2 is installed
  • AND Package Information
  • xorg-x11-server-1.20.3-22.5.5 is installed
  • OR xorg-x11-server-wayland-1.20.3-22.5.5 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud 7 is installed
  • AND Package Information
  • java-1_7_1-ibm-1.7.1_sr4.25-38.23 is installed
  • OR java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23 is installed
  • OR java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23 is installed
  • OR java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23 is installed
  • OR java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud 8 is installed
  • AND git-2.12.3-27.17 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud 9 is installed
  • AND python-SQLAlchemy-1.2.10-3.3 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud Crowbar 8 is installed
  • AND Package Information
  • evince-3.20.2-6.27 is installed
  • OR evince-browser-plugin-3.20.2-6.27 is installed
  • OR evince-lang-3.20.2-6.27 is installed
  • OR evince-plugin-djvudocument-3.20.2-6.27 is installed
  • OR evince-plugin-dvidocument-3.20.2-6.27 is installed
  • OR evince-plugin-pdfdocument-3.20.2-6.27 is installed
  • OR evince-plugin-psdocument-3.20.2-6.27 is installed
  • OR evince-plugin-tiffdocument-3.20.2-6.27 is installed
  • OR evince-plugin-xpsdocument-3.20.2-6.27 is installed
  • OR libevdocument3-4-3.20.2-6.27 is installed
  • OR libevview3-3-3.20.2-6.27 is installed
  • OR nautilus-evince-3.20.2-6.27 is installed
  • BACK