| Revision Date: | 2020-12-01 | Version: | 1 |
| Title: | Security update for osc (Important) |
| Description: |
This update for osc to version 0.165.4 fixes the following issues:
Security issue fixed:
- CVE-2019-3685: Fixed broken TLS certificate handling allowing for a Man-in-the-middle attack (bsc#1142518).
Non-security issues fixed:
- support different token operations (runservice, release and rebuild) (requires OBS 2.10) - fix osc token decode error - offline build mode is now really offline and does not try to download the buildconfig - osc build -define now works with python3 - fixes an issue where the error message on osc meta -e was not parsed correctly - osc maintainer -s now works with python3 - simplified and fixed osc meta -e (bsc#1138977) - osc lbl now works with non utf8 encoding (bsc#1129889) - add simpleimage as local build type - allow optional fork when creating a maintenance request - fix RPMError fallback - fix local caching for all package formats - fix appname for trusted cert store - osc -h does not break anymore when using plugins - switch to difflib.diff_bytes and sys.stdout.buffer.write for diffing. This will fix all decoding issues with osc diff, osc ci and osc rq -d - fix osc ls -lb handling empty size and mtime - removed decoding on osc api command.
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | 1012382
1037697
1046299
1046300
1046302
1046303
1046305
1046306
1046307
1046533
1046543
1050242
1050536
1050538
1050540
1051510
1054245
1056651
1056787
1058169
1058659
1060463
1065729
1068032
1071995
1074701
1075087
1075360
1077338
1077761
1077989
1083548
1085030
1085042
1085235
1085308
1085536
1085539
1086301
1086313
1086314
1086324
1086457
1087078
1087092
1087202
1087217
1087233
1090098
1090888
1091041
1091171
1093148
1093666
1094119
1094420
1096330
1097583
1097584
1097585
1097586
1097587
1097588
1098633
1099193
1100132
1100394
1100884
1101143
1101337
1101352
1101564
1101669
1101674
1101789
1101813
1101816
1102088
1102097
1102147
1102340
1102512
1102640
1102851
1103216
1103220
1103230
1103421
1105412
1111666
1112178
1113956
1120163
1125601
1127153
1129889
1129991
1130245
1133021
1134452
1138977
1140697
1142518
1142662
1144211
1144333
1144902
1152763
1153921
1154289
1154598
1162117
1166844
1166916
1169790
1171688
1171746
1172108
1172140
1172247
1172418
1172428
1172437
1172442
1172443
1172781
1172782
1172783
1172871
1172872
1172963
1173389
1173485
1173798
1173954
1174003
1174026
1174070
1174161
1174205
1174247
1174298
1174299
1174387
1174484
1174547
1174549
1174550
1174625
1174658
1174685
1174689
1174699
1174734
1174757
1174771
1174840
1174841
1174843
1174844
1174845
1174852
1174873
1174887
1174904
1174926
1174968
1175062
1175063
1175064
1175065
1175066
1175067
1175112
1175127
1175128
1175149
1175199
1175213
1175228
1175232
1175284
1175393
1175394
1175396
1175397
1175398
1175399
1175400
1175401
1175402
1175403
1175404
1175405
1175406
1175407
1175408
1175409
1175410
1175411
1175412
1175413
1175414
1175415
1175416
1175417
1175418
1175419
1175420
1175421
1175422
1175423
1175440
1175493
1175515
1175518
1175526
1175550
1175654
1175666
1175668
1175669
1175670
1175767
1175768
1175769
1175770
1175771
1175772
1175786
1175873
1175992
1177513
1177729
1178003
1178264
CVE-2007-4129
CVE-2009-0696
CVE-2009-4022
CVE-2010-3613
CVE-2010-3614
CVE-2010-3615
CVE-2011-0414
CVE-2011-0421
CVE-2011-1907
CVE-2011-1910
CVE-2011-2464
CVE-2011-4313
CVE-2012-1162
CVE-2012-1163
CVE-2012-1667
CVE-2012-3817
CVE-2012-3868
CVE-2012-4244
CVE-2012-5166
CVE-2012-5688
CVE-2012-5689
CVE-2013-2266
CVE-2013-4854
CVE-2013-6393
CVE-2014-0591
CVE-2014-2525
CVE-2014-8080
CVE-2014-8090
CVE-2014-9130
CVE-2015-2331
CVE-2017-1000405
CVE-2017-18344
CVE-2018-1000199
CVE-2018-5390
CVE-2019-10218
CVE-2019-14833
CVE-2019-14847
CVE-2019-15666
CVE-2019-3685
CVE-2019-3695
CVE-2019-3696
CVE-2020-0430
CVE-2020-10531
CVE-2020-10757
CVE-2020-11080
CVE-2020-11996
CVE-2020-12351
CVE-2020-14314
CVE-2020-14331
CVE-2020-14356
CVE-2020-16166
CVE-2020-24394
CVE-2020-25645
CVE-2020-7598
CVE-2020-8174
SUSE-SU-2018:1952-1
SUSE-SU-2018:2223-1
SUSE-SU-2019:2067-1
SUSE-SU-2019:2868-1
SUSE-SU-2020:0355-1
SUSE-SU-2020:1568-1
SUSE-SU-2020:1983-1
SUSE-SU-2020:2631-1
SUSE-SU-2020:3449-1
|
| Platform(s): | openSUSE Leap 15.0
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 11 SP4
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise Module for additional PackageHub packages 15
SUSE Linux Enterprise Module for Development Tools 15 SP1
SUSE Linux Enterprise Module for Live Patching 15
SUSE Linux Enterprise Module for Live Patching 15 SP1
SUSE Linux Enterprise Module for Public Cloud 15
SUSE Linux Enterprise Module for Realtime packages 15 SP1
SUSE Linux Enterprise Module for Web Scripting 15 SP2
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP1-LTSS
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP2-BCL
SUSE Linux Enterprise Server 12 SP2-ESPOS
SUSE Linux Enterprise Server 12 SP2-LTSS
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-BCL
SUSE Linux Enterprise Server 12 SP3-ESPOS
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Workstation Extension 15
SUSE OpenStack Cloud 7
SUSE OpenStack Cloud 8
SUSE OpenStack Cloud Crowbar 8
SUSE OpenStack Cloud Crowbar 9
| Product(s): | |
| Definition Synopsis |
| openSUSE Leap 15.0 is installed AND libimobiledevice6-1.2.0+git20170122.45fda81-lp150.1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 11 SP3 is installed
AND Package Information
compat-wireless-kmp-default-3.13_3.0.101_0.31-0.9 is installed
OR compat-wireless-kmp-pae-3.13_3.0.101_0.31-0.9 is installed
OR compat-wireless-kmp-xen-3.13_3.0.101_0.31-0.9 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 11 SP4 is installed
AND Package Information
xen-4.4.2_10-5 is installed
OR xen-doc-html-4.4.2_10-5 is installed
OR xen-kmp-default-4.4.2_10_3.0.101_63-5 is installed
OR xen-kmp-pae-4.4.2_10_3.0.101_63-5 is installed
OR xen-libs-4.4.2_10-5 is installed
OR xen-libs-32bit-4.4.2_10-5 is installed
OR xen-tools-4.4.2_10-5 is installed
OR xen-tools-domU-4.4.2_10-5 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 is installed
AND Package Information
bind-libs-9.9.5P1-1 is installed
OR bind-libs-32bit-9.9.5P1-1 is installed
OR bind-utils-9.9.5P1-1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP1 is installed
AND coolkey-1.1.0-147 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP2 is installed
AND Package Information
gnome-shell-3.20.4-70 is installed
OR gnome-shell-browser-plugin-3.20.4-70 is installed
OR gnome-shell-calendar-3.20.4-70 is installed
OR gnome-shell-lang-3.20.4-70 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP3 is installed
AND Package Information
gd-2.1.0-23 is installed
OR gd-32bit-2.1.0-23 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP4 is installed
AND Package Information
audiofile-0.3.6-10 is installed
OR libaudiofile1-0.3.6-10 is installed
OR libaudiofile1-32bit-0.3.6-10 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for additional PackageHub packages 15 is installed
AND Package Information
samba-4.7.11+git.186.d75219614c3-4.30 is installed
OR samba-python-4.7.11+git.186.d75219614c3-4.30 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed
AND osc-0.165.4-3.9 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Live Patching 15 is installed
AND Package Information
kernel-livepatch-4_12_14-150_41-default-8-2 is installed
OR kernel-livepatch-SLE15_Update_16-8-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed
AND Package Information
kernel-livepatch-4_12_14-197_10-default-8-2 is installed
OR kernel-livepatch-SLE15-SP1_Update_3-8-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Public Cloud 15 is installed
AND Package Information
kernel-azure-4.12.14-5.5 is installed
OR kernel-azure-base-4.12.14-5.5 is installed
OR kernel-azure-devel-4.12.14-5.5 is installed
OR kernel-devel-azure-4.12.14-5.5 is installed
OR kernel-source-azure-4.12.14-5.5 is installed
OR kernel-syms-azure-4.12.14-5.5 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Realtime packages 15 SP1 is installed
AND Package Information
cluster-md-kmp-rt-4.12.14-14.31 is installed
OR dlm-kmp-rt-4.12.14-14.31 is installed
OR gfs2-kmp-rt-4.12.14-14.31 is installed
OR kernel-devel-rt-4.12.14-14.31 is installed
OR kernel-rt-4.12.14-14.31 is installed
OR kernel-rt-base-4.12.14-14.31 is installed
OR kernel-rt-devel-4.12.14-14.31 is installed
OR kernel-rt_debug-4.12.14-14.31 is installed
OR kernel-rt_debug-devel-4.12.14-14.31 is installed
OR kernel-source-rt-4.12.14-14.31 is installed
OR kernel-syms-rt-4.12.14-14.31 is installed
OR ocfs2-kmp-rt-4.12.14-14.31 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Web Scripting 15 SP2 is installed
AND Package Information
tomcat-9.0.36-3.3 is installed
OR tomcat-admin-webapps-9.0.36-3.3 is installed
OR tomcat-el-3_0-api-9.0.36-3.3 is installed
OR tomcat-jsp-2_3-api-9.0.36-3.3 is installed
OR tomcat-lib-9.0.36-3.3 is installed
OR tomcat-servlet-4_0-api-9.0.36-3.3 is installed
OR tomcat-webapps-9.0.36-3.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP1 is installed
AND yast2-3.1.155-1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP1-LTSS is installed
AND Package Information
kgraft-patch-3_12_74-60_64_45-default-2-2 is installed
OR kgraft-patch-3_12_74-60_64_45-xen-2-2 is installed
OR kgraft-patch-SLE12-SP1_Update_16-2-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2 is installed
AND Package Information
file-5.19-9 is installed
OR file-magic-5.19-9 is installed
OR libmagic1-5.19-9 is installed
OR libmagic1-32bit-5.19-9 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-BCL is installed
AND Package Information
kernel-default-4.4.121-92.92 is installed
OR kernel-default-base-4.4.121-92.92 is installed
OR kernel-default-devel-4.4.121-92.92 is installed
OR kernel-devel-4.4.121-92.92 is installed
OR kernel-macros-4.4.121-92.92 is installed
OR kernel-source-4.4.121-92.92 is installed
OR kernel-syms-4.4.121-92.92 is installed
OR kgraft-patch-4_4_121-92_92-default-1-3.7 is installed
OR kgraft-patch-SLE12-SP2_Update_24-1-3.7 is installed
OR lttng-modules-2.7.1-9.4 is installed
OR lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
AND Package Information
openslp-2.0.0-18.15 is installed
OR openslp-32bit-2.0.0-18.15 is installed
OR openslp-server-2.0.0-18.15 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-LTSS is installed
AND Package Information
kgraft-patch-4_4_74-92_38-default-9-2 is installed
OR kgraft-patch-SLE12-SP2_Update_13-9-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3 is installed
AND Package Information
cracklib-2.9.0-7 is installed
OR libcrack2-2.9.0-7 is installed
OR libcrack2-32bit-2.9.0-7 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-BCL is installed
AND Package Information
libdcerpc-binding0-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR libdcerpc-binding0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR libdcerpc0-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR libdcerpc0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR libndr-krb5pac0-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR libndr-krb5pac0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR libndr-nbt0-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR libndr-nbt0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR libndr-standard0-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR libndr-standard0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR libndr0-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR libndr0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR libnetapi0-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR libnetapi0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR libsamba-credentials0-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR libsamba-credentials0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR libsamba-errors0-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR libsamba-errors0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR libsamba-hostconfig0-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR libsamba-hostconfig0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR libsamba-passdb0-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR libsamba-passdb0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR libsamba-util0-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR libsamba-util0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR libsamdb0-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR libsamdb0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR libsmbclient0-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR libsmbclient0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR libsmbconf0-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR libsmbconf0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR libsmbldap0-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR libsmbldap0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR libtevent-util0-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR libtevent-util0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR libwbclient0-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR libwbclient0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR samba-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR samba-client-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR samba-client-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR samba-doc-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR samba-libs-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR samba-libs-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR samba-winbind-4.6.16+git.174.c2fd2e28c84-3.49 is installed
OR samba-winbind-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-ESPOS is installed
AND Package Information
nfs-client-1.3.0-34.22 is installed
OR nfs-doc-1.3.0-34.22 is installed
OR nfs-kernel-server-1.3.0-34.22 is installed
OR nfs-utils-1.3.0-34.22 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-LTSS is installed
AND Package Information
nfs-client-1.3.0-34.22 is installed
OR nfs-doc-1.3.0-34.22 is installed
OR nfs-kernel-server-1.3.0-34.22 is installed
OR nfs-utils-1.3.0-34.22 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
AND Package Information
ceph-12.2.7+git.1531910353.c0ef85b854-2.12 is installed
OR ceph-common-12.2.7+git.1531910353.c0ef85b854-2.12 is installed
OR libcephfs2-12.2.7+git.1531910353.c0ef85b854-2.12 is installed
OR librados2-12.2.7+git.1531910353.c0ef85b854-2.12 is installed
OR libradosstriper1-12.2.7+git.1531910353.c0ef85b854-2.12 is installed
OR librbd1-12.2.7+git.1531910353.c0ef85b854-2.12 is installed
OR librgw2-12.2.7+git.1531910353.c0ef85b854-2.12 is installed
OR python-cephfs-12.2.7+git.1531910353.c0ef85b854-2.12 is installed
OR python-rados-12.2.7+git.1531910353.c0ef85b854-2.12 is installed
OR python-rbd-12.2.7+git.1531910353.c0ef85b854-2.12 is installed
OR python-rgw-12.2.7+git.1531910353.c0ef85b854-2.12 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP4 is installed
AND Package Information
apache2-2.4.23-29.24 is installed
OR apache2-doc-2.4.23-29.24 is installed
OR apache2-example-pages-2.4.23-29.24 is installed
OR apache2-prefork-2.4.23-29.24 is installed
OR apache2-utils-2.4.23-29.24 is installed
OR apache2-worker-2.4.23-29.24 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server for SAP Applications 15 is installed
AND Package Information
nodejs10-10.21.0-1.21 is installed
OR nodejs10-devel-10.21.0-1.21 is installed
OR nodejs10-docs-10.21.0-1.21 is installed
OR npm10-10.21.0-1.21 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Workstation Extension 15 is installed
AND Package Information
kernel-default-4.12.14-25.6 is installed
OR kernel-default-extra-4.12.14-25.6 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 7 is installed
AND Package Information
grafana-4.5.1-1.8 is installed
OR kafka-0.10.2.2-5 is installed
OR logstash-2.4.1-5 is installed
OR monasca-installer-20180608_12.47-9 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 8 is installed
AND python-Twisted-15.2.1-9.5 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud Crowbar 8 is installed
AND Package Information
ruby2.1-rubygem-activejob-4_2-4.2.9-3.6 is installed
OR rubygem-activejob-4_2-4.2.9-3.6 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud Crowbar 9 is installed
AND python-Django1-1.11.23-3.9 is installed
|