Oval Definition:	oval:org.opensuse.security:def:51954
Revision Date: 2022-11-15 Version: 1 Title: Security update for sudo (Important) Description: This update for sudo fixes the following issues: - CVE-2022-43995: Fixed a potential heap-based buffer over-read when entering a password of seven characters or fewer and using the crypt() password backend (bsc#1204986). Family: unix Class: patch Status: Reference(s): 1051510 1055117 1071995 1083647 1083710 1100369 1102247 1103991 1103992 1104745 1109160 1109837 1111666 1112374 1118367 1118368 1119222 1123080 1127034 1127315 1127611 1128220 1129770 1130972 1133021 1134090 1134097 1134390 1134399 1135335 1135642 1136217 1136342 1136460 1136461 1136462 1136467 1137458 1137534 1137535 1137584 1137609 1137811 1137827 1138874 1139358 1139619 1140133 1140139 1140322 1140559 1140652 1140676 1140903 1140945 1140948 1141312 1141401 1141402 1141452 1141453 1141454 1141478 1141558 1142023 1142052 1142083 1142112 1142115 1142119 1142220 1142221 1142254 1142350 1142351 1142354 1142359 1142450 1142623 1142673 1142701 1142868 1143003 1143045 1143105 1143185 1143189 1143191 1143209 1143507 1145774 1151850 1152308 1152649 1154093 1154999 1156205 1157051 1157490 1160903 1160905 1161168 1161883 1162160 1167007 1167462 1168683 1169511 1170667 1170713 1170765 1171313 1171740 1172958 1173307 1173311 1173983 1175443 1176092 1176674 1178671 1189521 1204986 906079 CVE-2009-2624 CVE-2010-0001 CVE-2011-2483 CVE-2011-3177 CVE-2011-3630 CVE-2011-3631 CVE-2011-3632 CVE-2012-0786 CVE-2013-1981 CVE-2013-1997 CVE-2013-2004 CVE-2013-6418 CVE-2014-2524 CVE-2014-6271 CVE-2014-6277 CVE-2014-6278 CVE-2014-7169 CVE-2014-7186 CVE-2014-7187 CVE-2014-8119 CVE-2015-8079 CVE-2016-7942 CVE-2017-3136 CVE-2018-20855 CVE-2018-5741 CVE-2019-11043 CVE-2019-1125 CVE-2019-11810 CVE-2019-13631 CVE-2019-13648 CVE-2019-14283 CVE-2019-14284 CVE-2019-16884 CVE-2019-18902 CVE-2019-6477 CVE-2020-10703 CVE-2020-12321 CVE-2020-12430 CVE-2020-2754 CVE-2020-2755 CVE-2020-2756 CVE-2020-2757 CVE-2020-2767 CVE-2020-2773 CVE-2020-2778 CVE-2020-2781 CVE-2020-2800 CVE-2020-2803 CVE-2020-2805 CVE-2020-2816 CVE-2020-2830 CVE-2020-7216 CVE-2020-8616 CVE-2020-8617 CVE-2020-8618 CVE-2020-8619 CVE-2020-8620 CVE-2020-8621 CVE-2020-8622 CVE-2020-8623 CVE-2020-8624 CVE-2021-3712 CVE-2022-43995 SUSE-SU-2019:2073-1 SUSE-SU-2019:2786-1 SUSE-SU-2019:2819-1 SUSE-SU-2020:0263-1 SUSE-SU-2020:1208-1 SUSE-SU-2020:1511-1 SUSE-SU-2020:2914-1 SUSE-SU-2020:3349-1 SUSE-SU-2021:2995-1 SUSE-SU-2022:4001-1 Platform(s): openSUSE Leap 15.0 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Web Scripting 15 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND cups-filters-1.20.3-lp150.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND postgresql-8.3.23-0.4 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information libldb1-3.6.3-64 is installed OR libldb1-32bit-3.6.3-64 is installed OR libsmbclient0-3.6.3-64 is installed OR libsmbclient0-32bit-3.6.3-64 is installed OR libtalloc2-3.6.3-64 is installed OR libtalloc2-32bit-3.6.3-64 is installed OR libtdb1-3.6.3-64 is installed OR libtdb1-32bit-3.6.3-64 is installed OR libtevent0-3.6.3-64 is installed OR libtevent0-32bit-3.6.3-64 is installed OR libwbclient0-3.6.3-64 is installed OR libwbclient0-32bit-3.6.3-64 is installed OR samba-3.6.3-64 is installed OR samba-32bit-3.6.3-64 is installed OR samba-client-3.6.3-64 is installed OR samba-client-32bit-3.6.3-64 is installed OR samba-doc-3.6.3-64 is installed OR samba-krb-printing-3.6.3-64 is installed OR samba-winbind-3.6.3-64 is installed OR samba-winbind-32bit-3.6.3-64 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND gzip-1.6-7 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND libaugeas0-1.2.0-3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information bash-4.3-78 is installed OR bash-doc-4.3-78 is installed OR bash-lang-4.3-78 is installed OR libreadline6-6.3-78 is installed OR libreadline6-32bit-6.3-78 is installed OR readline-doc-6.3-78 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND hardlink-1.0-6 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND ft2demos-2.6.3-7.15 is installed Definition Synopsis SUSE Linux Enterprise Micro 5.3 is installed AND sudo-1.9.9-150400.4.6.1 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed AND Package Information dtb-aarch64-4.12.14-197.15 is installed OR dtb-al-4.12.14-197.15 is installed OR dtb-allwinner-4.12.14-197.15 is installed OR dtb-altera-4.12.14-197.15 is installed OR dtb-amd-4.12.14-197.15 is installed OR dtb-amlogic-4.12.14-197.15 is installed OR dtb-apm-4.12.14-197.15 is installed OR dtb-arm-4.12.14-197.15 is installed OR dtb-broadcom-4.12.14-197.15 is installed OR dtb-cavium-4.12.14-197.15 is installed OR dtb-exynos-4.12.14-197.15 is installed OR dtb-freescale-4.12.14-197.15 is installed OR dtb-hisilicon-4.12.14-197.15 is installed OR dtb-lg-4.12.14-197.15 is installed OR dtb-marvell-4.12.14-197.15 is installed OR dtb-mediatek-4.12.14-197.15 is installed OR dtb-nvidia-4.12.14-197.15 is installed OR dtb-qcom-4.12.14-197.15 is installed OR dtb-renesas-4.12.14-197.15 is installed OR dtb-rockchip-4.12.14-197.15 is installed OR dtb-socionext-4.12.14-197.15 is installed OR dtb-sprd-4.12.14-197.15 is installed OR dtb-xilinx-4.12.14-197.15 is installed OR dtb-zte-4.12.14-197.15 is installed OR kernel-debug-4.12.14-197.15 is installed OR kernel-debug-base-4.12.14-197.15 is installed OR kernel-debug-devel-4.12.14-197.15 is installed OR kernel-debug-livepatch-devel-4.12.14-197.15 is installed OR kernel-default-4.12.14-197.15 is installed OR kernel-default-livepatch-4.12.14-197.15 is installed OR kernel-docs-4.12.14-197.15 is installed OR kernel-docs-html-4.12.14-197.15 is installed OR kernel-kvmsmall-4.12.14-197.15 is installed OR kernel-kvmsmall-base-4.12.14-197.15 is installed OR kernel-kvmsmall-devel-4.12.14-197.15 is installed OR kernel-kvmsmall-livepatch-devel-4.12.14-197.15 is installed OR kernel-obs-qa-4.12.14-197.15 is installed OR kernel-source-4.12.14-197.15 is installed OR kernel-source-vanilla-4.12.14-197.15 is installed OR kernel-vanilla-4.12.14-197.15 is installed OR kernel-vanilla-base-4.12.14-197.15 is installed OR kernel-vanilla-devel-4.12.14-197.15 is installed OR kernel-vanilla-livepatch-devel-4.12.14-197.15 is installed OR kernel-zfcpdump-4.12.14-197.15 is installed OR kernel-zfcpdump-man-4.12.14-197.15 is installed OR kselftests-kmp-default-4.12.14-197.15 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed AND Package Information libvirt-5.1.0-8.16 is installed OR libvirt-admin-5.1.0-8.16 is installed OR libvirt-bash-completion-5.1.0-8.16 is installed OR libvirt-client-5.1.0-8.16 is installed OR libvirt-daemon-5.1.0-8.16 is installed OR libvirt-daemon-config-network-5.1.0-8.16 is installed OR libvirt-daemon-config-nwfilter-5.1.0-8.16 is installed OR libvirt-daemon-driver-interface-5.1.0-8.16 is installed OR libvirt-daemon-driver-libxl-5.1.0-8.16 is installed OR libvirt-daemon-driver-lxc-5.1.0-8.16 is installed OR libvirt-daemon-driver-network-5.1.0-8.16 is installed OR libvirt-daemon-driver-nodedev-5.1.0-8.16 is installed OR libvirt-daemon-driver-nwfilter-5.1.0-8.16 is installed OR libvirt-daemon-driver-qemu-5.1.0-8.16 is installed OR libvirt-daemon-driver-secret-5.1.0-8.16 is installed OR libvirt-daemon-driver-storage-5.1.0-8.16 is installed OR libvirt-daemon-driver-storage-core-5.1.0-8.16 is installed OR libvirt-daemon-driver-storage-disk-5.1.0-8.16 is installed OR libvirt-daemon-driver-storage-iscsi-5.1.0-8.16 is installed OR libvirt-daemon-driver-storage-logical-5.1.0-8.16 is installed OR libvirt-daemon-driver-storage-mpath-5.1.0-8.16 is installed OR libvirt-daemon-driver-storage-rbd-5.1.0-8.16 is installed OR libvirt-daemon-driver-storage-scsi-5.1.0-8.16 is installed OR libvirt-daemon-hooks-5.1.0-8.16 is installed OR libvirt-daemon-lxc-5.1.0-8.16 is installed OR libvirt-daemon-qemu-5.1.0-8.16 is installed OR libvirt-daemon-xen-5.1.0-8.16 is installed OR libvirt-devel-5.1.0-8.16 is installed OR libvirt-doc-5.1.0-8.16 is installed OR libvirt-lock-sanlock-5.1.0-8.16 is installed OR libvirt-nss-5.1.0-8.16 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP2 is installed AND Package Information bind-9.16.6-12.32 is installed OR bind-chrootenv-9.16.6-12.32 is installed OR bind-doc-9.16.6-12.32 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 is installed AND Package Information apache2-mod_php7-7.2.5-4.46 is installed OR php7-7.2.5-4.46 is installed OR php7-bcmath-7.2.5-4.46 is installed OR php7-bz2-7.2.5-4.46 is installed OR php7-calendar-7.2.5-4.46 is installed OR php7-ctype-7.2.5-4.46 is installed OR php7-curl-7.2.5-4.46 is installed OR php7-dba-7.2.5-4.46 is installed OR php7-devel-7.2.5-4.46 is installed OR php7-dom-7.2.5-4.46 is installed OR php7-enchant-7.2.5-4.46 is installed OR php7-exif-7.2.5-4.46 is installed OR php7-fastcgi-7.2.5-4.46 is installed OR php7-fileinfo-7.2.5-4.46 is installed OR php7-fpm-7.2.5-4.46 is installed OR php7-ftp-7.2.5-4.46 is installed OR php7-gd-7.2.5-4.46 is installed OR php7-gettext-7.2.5-4.46 is installed OR php7-gmp-7.2.5-4.46 is installed OR php7-iconv-7.2.5-4.46 is installed OR php7-intl-7.2.5-4.46 is installed OR php7-json-7.2.5-4.46 is installed OR php7-ldap-7.2.5-4.46 is installed OR php7-mbstring-7.2.5-4.46 is installed OR php7-mysql-7.2.5-4.46 is installed OR php7-odbc-7.2.5-4.46 is installed OR php7-opcache-7.2.5-4.46 is installed OR php7-openssl-7.2.5-4.46 is installed OR php7-pcntl-7.2.5-4.46 is installed OR php7-pdo-7.2.5-4.46 is installed OR php7-pear-7.2.5-4.46 is installed OR php7-pear-Archive_Tar-7.2.5-4.46 is installed OR php7-pgsql-7.2.5-4.46 is installed OR php7-phar-7.2.5-4.46 is installed OR php7-posix-7.2.5-4.46 is installed OR php7-shmop-7.2.5-4.46 is installed OR php7-snmp-7.2.5-4.46 is installed OR php7-soap-7.2.5-4.46 is installed OR php7-sockets-7.2.5-4.46 is installed OR php7-sodium-7.2.5-4.46 is installed OR php7-sqlite-7.2.5-4.46 is installed OR php7-sysvmsg-7.2.5-4.46 is installed OR php7-sysvsem-7.2.5-4.46 is installed OR php7-sysvshm-7.2.5-4.46 is installed OR php7-tokenizer-7.2.5-4.46 is installed OR php7-wddx-7.2.5-4.46 is installed OR php7-xmlreader-7.2.5-4.46 is installed OR php7-xmlrpc-7.2.5-4.46 is installed OR php7-xmlwriter-7.2.5-4.46 is installed OR php7-xsl-7.2.5-4.46 is installed OR php7-zip-7.2.5-4.46 is installed OR php7-zlib-7.2.5-4.46 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information libpcsclite1-1.8.10-3 is installed OR pcsc-lite-1.8.10-3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kgraft-patch-3_12_74-60_64_40-default-6-2 is installed OR kgraft-patch-3_12_74-60_64_40-xen-6-2 is installed OR kgraft-patch-SLE12-SP1_Update_15-6-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information coreutils-8.25-12 is installed OR coreutils-lang-8.25-12 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information gpg2-2.0.24-9.3 is installed OR gpg2-lang-2.0.24-9.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information kernel-default-4.4.121-92.85 is installed OR kernel-default-base-4.4.121-92.85 is installed OR kernel-default-devel-4.4.121-92.85 is installed OR kernel-devel-4.4.121-92.85 is installed OR kernel-macros-4.4.121-92.85 is installed OR kernel-source-4.4.121-92.85 is installed OR kernel-syms-4.4.121-92.85 is installed OR kgraft-patch-4_4_121-92_85-default-1-3.5 is installed OR kgraft-patch-SLE12-SP2_Update_23-1-3.5 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information libvirt-2.0.0-27.42 is installed OR libvirt-client-2.0.0-27.42 is installed OR libvirt-daemon-2.0.0-27.42 is installed OR libvirt-daemon-config-network-2.0.0-27.42 is installed OR libvirt-daemon-config-nwfilter-2.0.0-27.42 is installed OR libvirt-daemon-driver-interface-2.0.0-27.42 is installed OR libvirt-daemon-driver-libxl-2.0.0-27.42 is installed OR libvirt-daemon-driver-lxc-2.0.0-27.42 is installed OR libvirt-daemon-driver-network-2.0.0-27.42 is installed OR libvirt-daemon-driver-nodedev-2.0.0-27.42 is installed OR libvirt-daemon-driver-nwfilter-2.0.0-27.42 is installed OR libvirt-daemon-driver-qemu-2.0.0-27.42 is installed OR libvirt-daemon-driver-secret-2.0.0-27.42 is installed OR libvirt-daemon-driver-storage-2.0.0-27.42 is installed OR libvirt-daemon-hooks-2.0.0-27.42 is installed OR libvirt-daemon-lxc-2.0.0-27.42 is installed OR libvirt-daemon-qemu-2.0.0-27.42 is installed OR libvirt-daemon-xen-2.0.0-27.42 is installed OR libvirt-doc-2.0.0-27.42 is installed OR libvirt-lock-sanlock-2.0.0-27.42 is installed OR libvirt-nss-2.0.0-27.42 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information aaa_base-13.2+git20140911.61c1681-36 is installed OR aaa_base-extras-13.2+git20140911.61c1681-36 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-BCL is installed AND Package Information java-1_7_0-openjdk-1.7.0.241-43.30 is installed OR java-1_7_0-openjdk-demo-1.7.0.241-43.30 is installed OR java-1_7_0-openjdk-devel-1.7.0.241-43.30 is installed OR java-1_7_0-openjdk-headless-1.7.0.241-43.30 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND Package Information kernel-default-4.4.180-94.103 is installed OR kernel-default-base-4.4.180-94.103 is installed OR kernel-default-devel-4.4.180-94.103 is installed OR kernel-devel-4.4.180-94.103 is installed OR kernel-macros-4.4.180-94.103 is installed OR kernel-source-4.4.180-94.103 is installed OR kernel-syms-4.4.180-94.103 is installed OR kgraft-patch-4_4_180-94_103-default-1-4.3 is installed OR kgraft-patch-SLE12-SP3_Update_28-1-4.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information MozillaFirefox-60.9.0-109.86 is installed OR MozillaFirefox-translations-common-60.9.0-109.86 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND perl-Archive-Zip-1.34-3.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND SuSEfirewall2-3.6.312.333-3.13 is installed Definition Synopsis SUSE Linux Enterprise Server 15-LTSS is installed AND Package Information java-11-openjdk-11.0.7.0-3.42 is installed OR java-11-openjdk-demo-11.0.7.0-3.42 is installed OR java-11-openjdk-devel-11.0.7.0-3.42 is installed OR java-11-openjdk-headless-11.0.7.0-3.42 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed AND Package Information libopenssl-1_0_0-devel-1.0.2p-3.42.2 is installed OR libopenssl1_0_0-1.0.2p-3.42.2 is installed OR libopenssl1_0_0-32bit-1.0.2p-3.42.2 is installed OR libopenssl1_0_0-hmac-1.0.2p-3.42.2 is installed OR libopenssl1_0_0-hmac-32bit-1.0.2p-3.42.2 is installed OR openssl-1_0_0-1.0.2p-3.42.2 is installed OR openssl-1_0_0-doc-1.0.2p-3.42.2 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information wicked-0.6.60-3.21 is installed OR wicked-service-0.6.60-3.21 is installed Definition Synopsis SUSE OpenStack Cloud 6 is installed AND wpa_supplicant-2.2-15.3 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND yast2-smt-3.0.14-17.3 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND Package Information ruby2.1-rubygem-sprockets-2_12-2.12.5-1.4 is installed OR rubygem-sprockets-2_12-2.12.5-1.4 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 9 is installed AND nodejs6-6.17.0-11.27 is installed
BACK