Oval Definition:	oval:org.opensuse.security:def:52958
Revision Date: 2020-12-01 Version: 1 Title: Security update for taglib (Low) Description: This update for taglib fixes the following issues: - CVE-2018-11439: The TagLib::Ogg::FLAC::File::scan function allowed remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted audio file (bsc#1096180) Family: unix Class: patch Status: Reference(s): 1000362 1004237 1010979 1010980 1020451 1020456 1020458 1020460 1045450 1057152 1088278 1096180 1114498 1115637 1117328 1120805 1120807 903204 903216 903638 905260 934524 934525 934526 934527 934528 934529 951166 983582 984751 985177 985348 989523 991069 CVE-2011-1521 CVE-2011-2513 CVE-2011-2513 CVE-2011-2514 CVE-2011-2514 CVE-2011-3377 CVE-2011-3377 CVE-2011-3389 CVE-2011-4944 CVE-2012-0845 CVE-2012-1150 CVE-2012-2369 CVE-2012-3422 CVE-2012-3422 CVE-2012-3423 CVE-2012-3423 CVE-2012-4540 CVE-2012-4540 CVE-2013-1752 CVE-2013-1753 CVE-2013-1926 CVE-2013-1926 CVE-2013-1927 CVE-2013-1927 CVE-2013-4238 CVE-2013-4349 CVE-2013-4349 CVE-2014-0107 CVE-2014-1912 CVE-2014-2524 CVE-2014-4650 CVE-2014-6271 CVE-2014-6277 CVE-2014-6278 CVE-2014-7169 CVE-2014-7185 CVE-2014-7186 CVE-2014-7187 CVE-2014-8080 CVE-2014-8090 CVE-2014-8354 CVE-2014-8355 CVE-2014-8562 CVE-2014-8716 CVE-2014-8767 CVE-2014-8768 CVE-2014-8769 CVE-2014-9140 CVE-2014-9732 CVE-2015-0261 CVE-2015-2153 CVE-2015-2154 CVE-2015-2155 CVE-2015-4467 CVE-2015-4468 CVE-2015-4469 CVE-2015-4470 CVE-2015-4471 CVE-2015-4472 CVE-2015-5234 CVE-2015-5234 CVE-2015-5235 CVE-2015-5235 CVE-2015-8833 CVE-2016-0772 CVE-2016-0772 CVE-2016-1000110 CVE-2016-1000110 CVE-2016-10324 CVE-2016-10325 CVE-2016-10326 CVE-2016-2776 CVE-2016-5636 CVE-2016-5636 CVE-2016-5699 CVE-2016-5699 CVE-2016-8602 CVE-2016-9398 CVE-2016-9399 CVE-2017-14132 CVE-2017-5499 CVE-2017-5503 CVE-2017-5504 CVE-2017-5505 CVE-2017-7853 CVE-2017-9782 CVE-2018-11439 CVE-2018-18873 CVE-2018-19139 CVE-2018-19543 CVE-2018-20570 CVE-2018-20622 CVE-2018-9252 SUSE-SU-2016:0011-1 SUSE-SU-2016:2399-1 SUSE-SU-2016:2653-1 SUSE-SU-2016:2654-1 SUSE-SU-2020:2689-1 Platform(s): openSUSE Leap 15.0 openSUSE Leap 15.1 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Module for additional PackageHub packages 15 SUSE Linux Enterprise Module for additional PackageHub packages 15 SP1 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND Package Information gstreamer-1.12.5-lp150.1 is installed OR gstreamer-lang-1.12.5-lp150.1 is installed OR gstreamer-utils-1.12.5-lp150.1 is installed OR libgstreamer-1_0-0-1.12.5-lp150.1 is installed OR typelib-1_0-Gst-1_0-1.12.5-lp150.1 is installed Definition Synopsis openSUSE Leap 15.1 is installed AND Package Information znc-1.7.4-lp151.2.3 is installed OR znc-devel-1.7.4-lp151.2.3 is installed OR znc-lang-1.7.4-lp151.2.3 is installed OR znc-perl-1.7.4-lp151.2.3 is installed OR znc-python3-1.7.4-lp151.2.3 is installed OR znc-tcl-1.7.4-lp151.2.3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information xen-4.1.4_02-0.5 is installed OR xen-doc-html-4.1.4_02-0.5 is installed OR xen-doc-pdf-4.1.4_02-0.5 is installed OR xen-kmp-default-4.1.4_02_3.0.58_0.6.6-0.5 is installed OR xen-kmp-pae-4.1.4_02_3.0.58_0.6.6-0.5 is installed OR xen-kmp-trace-4.1.4_02_3.0.58_0.6.6-0.5 is installed OR xen-libs-4.1.4_02-0.5 is installed OR xen-libs-32bit-4.1.4_02-0.5 is installed OR xen-tools-4.1.4_02-0.5 is installed OR xen-tools-domU-4.1.4_02-0.5 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information emacs-22.3-4.42 is installed OR emacs-info-22.3-4.42 is installed OR emacs-x11-22.3-4.42 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information strongswan-4.4.0-6.32 is installed OR strongswan-doc-4.4.0-6.32 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information ImageMagick-6.8.8.1-8 is installed OR libMagick++-6_Q16-3-6.8.8.1-8 is installed OR libMagickCore-6_Q16-1-6.8.8.1-8 is installed OR libMagickCore-6_Q16-1-32bit-6.8.8.1-8 is installed OR libMagickWand-6_Q16-1-6.8.8.1-8 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information libruby2_1-2_1-2.1.2-9 is installed OR ruby2.1-2.1.2-9 is installed OR ruby2.1-stdlib-2.1.2-9 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information bash-4.3-78 is installed OR bash-doc-4.3-78 is installed OR bash-lang-4.3-78 is installed OR libreadline6-6.3-78 is installed OR libreadline6-32bit-6.3-78 is installed OR readline-doc-6.3-78 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND pidgin-plugin-otr-4.0.2-1 is installed Definition Synopsis SUSE Linux Enterprise Module for additional PackageHub packages 15 is installed AND taglib-1.11.1-4.3 is installed Definition Synopsis SUSE Linux Enterprise Module for additional PackageHub packages 15 SP1 is installed AND jasper-2.0.14-3.16 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information java-1_8_0-ibm-1.8.0_sr1.10-2 is installed OR java-1_8_0-ibm-alsa-1.8.0_sr1.10-2 is installed OR java-1_8_0-ibm-plugin-1.8.0_sr1.10-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information evince-3.10.3-2.8 is installed OR evince-lang-3.10.3-2.8 is installed OR libevdocument3-4-3.10.3-2.8 is installed OR libevview3-3-3.10.3-2.8 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information elfutils-0.158-6 is installed OR libasm1-0.158-6 is installed OR libasm1-32bit-0.158-6 is installed OR libdw1-0.158-6 is installed OR libdw1-32bit-0.158-6 is installed OR libebl1-0.158-6 is installed OR libebl1-32bit-0.158-6 is installed OR libelf1-0.158-6 is installed OR libelf1-32bit-0.158-6 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information xen-4.7.6_02-43.36 is installed OR xen-doc-html-4.7.6_02-43.36 is installed OR xen-libs-4.7.6_02-43.36 is installed OR xen-libs-32bit-4.7.6_02-43.36 is installed OR xen-tools-4.7.6_02-43.36 is installed OR xen-tools-domU-4.7.6_02-43.36 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information kgraft-patch-4_4_114-92_64-default-8-2 is installed OR kgraft-patch-SLE12-SP2_Update_18-8-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information kgraft-patch-4_4_74-92_29-default-12-2 is installed OR kgraft-patch-SLE12-SP2_Update_10-12-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information cracklib-2.9.0-7 is installed OR libcrack2-2.9.0-7 is installed OR libcrack2-32bit-2.9.0-7 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND permissions-2015.09.28.1626-17.27 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information libpython3_4m1_0-3.4.6-25.29 is installed OR python3-3.4.6-25.29 is installed OR python3-base-3.4.6-25.29 is installed OR python3-curses-3.4.6-25.29 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information tomcat-8.0.53-29.13 is installed OR tomcat-admin-webapps-8.0.53-29.13 is installed OR tomcat-docs-webapp-8.0.53-29.13 is installed OR tomcat-el-3_0-api-8.0.53-29.13 is installed OR tomcat-javadoc-8.0.53-29.13 is installed OR tomcat-jsp-2_3-api-8.0.53-29.13 is installed OR tomcat-lib-8.0.53-29.13 is installed OR tomcat-servlet-3_1-api-8.0.53-29.13 is installed OR tomcat-webapps-8.0.53-29.13 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information apache-commons-beanutils-1.9.2-1 is installed OR apache-commons-beanutils-javadoc-1.9.2-1 is installed Definition Synopsis SUSE OpenStack Cloud 6 is installed AND couchdb-1.6.1-2 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND Package Information libpython2_7-1_0-2.7.13-28.26 is installed OR libpython2_7-1_0-32bit-2.7.13-28.26 is installed OR python-2.7.13-28.26 is installed OR python-32bit-2.7.13-28.26 is installed OR python-base-2.7.13-28.26 is installed OR python-base-32bit-2.7.13-28.26 is installed OR python-curses-2.7.13-28.26 is installed OR python-demo-2.7.13-28.26 is installed OR python-devel-2.7.13-28.26 is installed OR python-doc-2.7.13-28.26 is installed OR python-doc-pdf-2.7.13-28.26 is installed OR python-gdbm-2.7.13-28.26 is installed OR python-idle-2.7.13-28.26 is installed OR python-tk-2.7.13-28.26 is installed OR python-xml-2.7.13-28.26 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND Package Information ardana-ansible-8.0+git.1560208949.67048e3-3.64 is installed OR ardana-db-8.0+git.1564410318.f0cca2c-3.28 is installed OR ardana-freezer-8.0+git.1564164977.ef9baeb-3.18 is installed OR ardana-glance-8.0+git.1564491709.349d78e-3.14 is installed OR ardana-input-model-8.0+git.1562848601.c3daff0-3.30 is installed OR ardana-nova-8.0+git.1565388406.c6abb8d-3.32 is installed OR ardana-osconfig-8.0+git.1563383198.c7fd9b4-3.39 is installed OR ardana-swiftlm-drive-provision-8.0+git.1541434883.e0ebe69-5.9 is installed OR ardana-swiftlm-log-tailer-8.0+git.1541434883.e0ebe69-5.9 is installed OR ardana-swiftlm-uptime-mon-8.0+git.1541434883.e0ebe69-5.9 is installed OR ardana-tempest-8.0+git.1562849010.73bc517-3.24 is installed OR caasp-openstack-heat-templates-1.0+git.1560518045.ad7dc6d-4.15 is installed OR documentation-suse-openstack-cloud-installation-8.20190805-1.20 is installed OR documentation-suse-openstack-cloud-operations-8.20190805-1.20 is installed OR documentation-suse-openstack-cloud-opsconsole-8.20190805-1.20 is installed OR documentation-suse-openstack-cloud-planning-8.20190805-1.20 is installed OR documentation-suse-openstack-cloud-security-8.20190805-1.20 is installed OR documentation-suse-openstack-cloud-supplement-8.20190805-1.20 is installed OR documentation-suse-openstack-cloud-upstream-admin-8.20190805-1.20 is installed OR documentation-suse-openstack-cloud-upstream-user-8.20190805-1.20 is installed OR documentation-suse-openstack-cloud-user-8.20190805-1.20 is installed OR galera-python-clustercheck-0.0+git.1562242499.36b8b64-4.6 is installed OR grafana-monasca-ui-drilldown-1.8.1~dev39-3.9 is installed OR openstack-cinder-11.2.3~dev7-3.18 is installed OR openstack-cinder-api-11.2.3~dev7-3.18 is installed OR openstack-cinder-backup-11.2.3~dev7-3.18 is installed OR openstack-cinder-doc-11.2.3~dev7-3.18 is installed OR openstack-cinder-scheduler-11.2.3~dev7-3.18 is installed OR openstack-cinder-volume-11.2.3~dev7-3.18 is installed OR openstack-glance-15.0.3~dev2-3.9 is installed OR openstack-glance-api-15.0.3~dev2-3.9 is installed OR openstack-glance-doc-15.0.3~dev2-3.9 is installed OR openstack-glance-registry-15.0.3~dev2-3.9 is installed OR openstack-heat-9.0.8~dev11-3.21 is installed OR openstack-heat-api-9.0.8~dev11-3.21 is installed OR openstack-heat-api-cfn-9.0.8~dev11-3.21 is installed OR openstack-heat-api-cloudwatch-9.0.8~dev11-3.21 is installed OR openstack-heat-doc-9.0.8~dev11-3.21 is installed OR openstack-heat-engine-9.0.8~dev11-3.21 is installed OR openstack-heat-plugin-heat_docker-9.0.8~dev11-3.21 is installed OR openstack-heat-test-9.0.8~dev11-3.21 is installed OR openstack-horizon-plugin-monasca-ui-1.8.1~dev39-3.9 is installed OR openstack-horizon-plugin-neutron-fwaas-ui-1.0.1~dev9-4.6 is installed OR openstack-ironic-9.1.8~dev7-3.21 is installed OR openstack-ironic-api-9.1.8~dev7-3.21 is installed OR openstack-ironic-conductor-9.1.8~dev7-3.21 is installed OR openstack-ironic-doc-9.1.8~dev7-3.21 is installed OR openstack-keystone-12.0.4~dev2-5.22 is installed OR openstack-keystone-doc-12.0.4~dev2-5.22 is installed OR openstack-manila-5.1.1~dev2-3.18 is installed OR openstack-manila-api-5.1.1~dev2-3.18 is installed OR openstack-manila-data-5.1.1~dev2-3.18 is installed OR openstack-manila-doc-5.1.1~dev2-3.18 is installed OR openstack-manila-scheduler-5.1.1~dev2-3.18 is installed OR openstack-manila-share-5.1.1~dev2-3.18 is installed OR openstack-monasca-agent-2.2.5~dev5-3.12 is installed OR openstack-monasca-api-2.2.2~dev1-3.15 is installed OR openstack-monasca-persister-1.7.1~dev10-3.9 is installed OR openstack-monasca-persister-java-1.7.1~a0~dev2-3.3 is installed OR openstack-murano-4.0.2~dev2-3.9 is installed OR openstack-murano-api-4.0.2~dev2-3.9 is installed OR openstack-murano-doc-4.0.2~dev2-3.9 is installed OR openstack-murano-engine-4.0.2~dev2-3.9 is installed OR openstack-neutron-11.0.9~dev42-3.21 is installed OR openstack-neutron-dhcp-agent-11.0.9~dev42-3.21 is installed OR openstack-neutron-doc-11.0.9~dev42-3.21 is installed OR openstack-neutron-gbp-7.3.1~dev45-3.6 is installed OR openstack-neutron-ha-tool-11.0.9~dev42-3.21 is installed OR openstack-neutron-l3-agent-11.0.9~dev42-3.21 is installed OR openstack-neutron-lbaas-11.0.4~dev6-3.12 is installed OR openstack-neutron-lbaas-agent-11.0.4~dev6-3.12 is installed OR openstack-neutron-lbaas-doc-11.0.4~dev6-3.12 is installed OR openstack-neutron-linuxbridge-agent-11.0.9~dev42-3.21 is installed OR openstack-neutron-macvtap-agent-11.0.9~dev42-3.21 is installed OR openstack-neutron-metadata-agent-11.0.9~dev42-3.21 is installed OR openstack-neutron-metering-agent-11.0.9~dev42-3.21 is installed OR openstack-neutron-openvswitch-agent-11.0.9~dev42-3.21 is installed OR openstack-neutron-server-11.0.9~dev42-3.21 is installed OR openstack-nova-16.1.9~dev4-3.26 is installed OR openstack-nova-api-16.1.9~dev4-3.26 is installed OR openstack-nova-cells-16.1.9~dev4-3.26 is installed OR openstack-nova-compute-16.1.9~dev4-3.26 is installed OR openstack-nova-conductor-16.1.9~dev4-3.26 is installed OR openstack-nova-console-16.1.9~dev4-3.26 is installed OR openstack-nova-consoleauth-16.1.9~dev4-3.26 is installed OR openstack-nova-doc-16.1.9~dev4-3.26 is installed OR openstack-nova-novncproxy-16.1.9~dev4-3.26 is installed OR openstack-nova-placement-api-16.1.9~dev4-3.26 is installed OR openstack-nova-scheduler-16.1.9~dev4-3.26 is installed OR openstack-nova-serialproxy-16.1.9~dev4-3.26 is installed OR openstack-nova-vncproxy-16.1.9~dev4-3.26 is installed OR openstack-octavia-1.0.6~dev2-4.18 is installed OR openstack-octavia-amphora-agent-1.0.6~dev2-4.18 is installed OR openstack-octavia-api-1.0.6~dev2-4.18 is installed OR openstack-octavia-health-manager-1.0.6~dev2-4.18 is installed OR openstack-octavia-housekeeping-1.0.6~dev2-4.18 is installed OR openstack-octavia-worker-1.0.6~dev2-4.18 is installed OR python-Beaver-8.0+git.1502900605.3e0068a-4.3 is installed OR python-cinder-11.2.3~dev7-3.18 is installed OR python-glance-15.0.3~dev2-3.9 is installed OR python-heat-9.0.8~dev11-3.21 is installed OR python-horizon-plugin-monasca-ui-1.8.1~dev39-3.9 is installed OR python-horizon-plugin-neutron-fwaas-ui-1.0.1~dev9-4.6 is installed OR python-ironic-9.1.8~dev7-3.21 is installed OR python-keystone-12.0.4~dev2-5.22 is installed OR python-manila-5.1.1~dev2-3.18 is installed OR python-monasca-agent-2.2.5~dev5-3.12 is installed OR python-monasca-api-2.2.2~dev1-3.15 is installed OR python-monasca-persister-1.7.1~dev10-3.9 is installed OR python-murano-4.0.2~dev2-3.9 is installed OR python-neutron-11.0.9~dev42-3.21 is installed OR python-neutron-gbp-7.3.1~dev45-3.6 is installed OR python-neutron-lbaas-11.0.4~dev6-3.12 is installed OR python-nova-16.1.9~dev4-3.26 is installed OR python-octavia-1.0.6~dev2-4.18 is installed OR python-oslo.db-4.25.2-3.6 is installed OR python-osprofiler-1.11.1-3.3 is installed OR python-swiftlm-8.0+git.1541434883.e0ebe69-5.9 is installed OR venv-openstack-magnum-5.0.2_5.0.2_5.0.2~dev31-11.18 is installed OR venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.18 is installed OR venv-openstack-monasca-2.2.2~dev1-11.16 is installed OR venv-openstack-monasca-ceilometer-1.5.1_1.5.1_1.5.1~dev3-8.14 is installed OR venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.14 is installed OR venv-openstack-monasca-x86_64-2.2.2~dev1-11.16 is installed OR venv-openstack-murano-4.0.2~dev2-12.14 is installed OR venv-openstack-murano-x86_64-4.0.2~dev2-12.14 is installed OR venv-openstack-neutron-11.0.9~dev42-13.22 is installed OR venv-openstack-neutron-x86_64-11.0.9~dev42-13.22 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND Package Information curl-7.37.0-37.43 is installed OR libcurl4-7.37.0-37.43 is installed OR libcurl4-32bit-7.37.0-37.43 is installed
BACK