| Revision Date: | 2020-12-01 | Version: | 1 |
| Title: | Security update for openwsman (Important) |
| Description: |
This update for openwsman fixes the following issues:
Security issues fixed:
- CVE-2019-3816: Fixed a vulnerability in openwsmand deamon which could lead to arbitary file disclosure (bsc#1122623). - CVE-2019-3833: Fixed a vulnerability in process_connection() which could allow an attacker to trigger an infinite loop which leads to Denial of Service (bsc#1122623).
Other issues addressed: - Added OpenSSL 1.1 compatibility - Compilation in debug mode fixed - Directory listing without authentication fixed (bsc#1092206).
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | 1007280
1010161
1010163
1011103
1011107
1044000
1044002
1044006
1044008
1044009
1044077
1044122
1045986
1092206
1122623
1159284
1165572
1167437
1168340
1169604
1170104
1170288
1171906
1172075
1173072
1174165
904017
912076
912929
914890
959886
960158
963230
965897
967122
970423
970860
972612
972727
973848
974449
974840
976766
978275
979823
984813
984815
987351
CVE-2006-0855
CVE-2007-1669
CVE-2008-4989
CVE-2011-3389
CVE-2011-4128
CVE-2011-4944
CVE-2012-0037
CVE-2012-0390
CVE-2012-0845
CVE-2012-1150
CVE-2012-1569
CVE-2012-1573
CVE-2013-1752
CVE-2013-4238
CVE-2014-0092
CVE-2014-1959
CVE-2014-2667
CVE-2014-3466
CVE-2014-3618
CVE-2014-3636
CVE-2014-3675
CVE-2014-3676
CVE-2014-3677
CVE-2014-4650
CVE-2014-7824
CVE-2014-8127
CVE-2014-8564
CVE-2014-9495
CVE-2014-9770
CVE-2015-0294
CVE-2015-0973
CVE-2015-3622
CVE-2015-6251
CVE-2015-8842
CVE-2016-0772
CVE-2016-1000110
CVE-2016-2335
CVE-2016-3622
CVE-2016-3658
CVE-2016-5321
CVE-2016-5323
CVE-2016-5636
CVE-2016-5652
CVE-2016-5699
CVE-2016-5875
CVE-2016-6354
CVE-2016-7444
CVE-2016-8610
CVE-2016-9273
CVE-2016-9297
CVE-2016-9448
CVE-2016-9453
CVE-2017-1000368
CVE-2017-18207
CVE-2017-5335
CVE-2017-5336
CVE-2017-5337
CVE-2017-8422
CVE-2017-9122
CVE-2017-9123
CVE-2017-9124
CVE-2017-9125
CVE-2017-9126
CVE-2017-9127
CVE-2017-9128
CVE-2018-1060
CVE-2018-1061
CVE-2018-15750
CVE-2018-15751
CVE-2019-3816
CVE-2019-3833
CVE-2020-11651
CVE-2020-11652
SUSE-SU-2016:1351-1
SUSE-SU-2016:1593-1
SUSE-SU-2016:3301-1
SUSE-SU-2017:1769-1
SUSE-SU-2017:1771-1
SUSE-SU-2019:0654-1
SUSE-SU-2020:1974-1
|
| Platform(s): | openSUSE Leap 15.0
openSUSE Leap 15.1
SUSE Linux Enterprise Desktop 11 SP2
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 11 SP4
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise Module for Server Applications 15
SUSE Linux Enterprise Module for Server Applications 15 SP1
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP1-LTSS
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP2-BCL
SUSE Linux Enterprise Server 12 SP2-ESPOS
SUSE Linux Enterprise Server 12 SP2-LTSS
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-BCL
SUSE Linux Enterprise Server 12 SP3-ESPOS
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 12 SP4
SUSE OpenStack Cloud 6
SUSE OpenStack Cloud 7
SUSE OpenStack Cloud 8
SUSE OpenStack Cloud Crowbar 8
SUSE OpenStack Cloud Crowbar 9
| Product(s): | |
| Definition Synopsis |
| openSUSE Leap 15.0 is installed AND Package Information
MozillaFirefox-60.0-lp150.2 is installed
OR MozillaFirefox-translations-common-60.0-lp150.2 is installed
OR MozillaFirefox-translations-other-60.0-lp150.2 is installed
|
| Definition Synopsis |
| openSUSE Leap 15.1 is installed
AND Package Information
libpng16-1.6.34-lp151.3.3 is installed
OR libpng16-16-1.6.34-lp151.3.3 is installed
OR libpng16-16-32bit-1.6.34-lp151.3.3 is installed
OR libpng16-compat-devel-1.6.34-lp151.3.3 is installed
OR libpng16-compat-devel-32bit-1.6.34-lp151.3.3 is installed
OR libpng16-devel-1.6.34-lp151.3.3 is installed
OR libpng16-devel-32bit-1.6.34-lp151.3.3 is installed
OR libpng16-tools-1.6.34-lp151.3.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 11 SP2 is installed
AND Package Information
MozillaFirefox-10.0.7-0.3 is installed
OR MozillaFirefox-branding-SLED-7-0.6.7 is installed
OR MozillaFirefox-translations-10.0.7-0.3 is installed
OR libfreebl3-3.13.6-0.5 is installed
OR libfreebl3-32bit-3.13.6-0.5 is installed
OR mozilla-nspr-4.9.2-0.6 is installed
OR mozilla-nspr-32bit-4.9.2-0.6 is installed
OR mozilla-nss-3.13.6-0.5 is installed
OR mozilla-nss-32bit-3.13.6-0.5 is installed
OR mozilla-nss-tools-3.13.6-0.5 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 11 SP3 is installed
AND Package Information
file-4.24-43.27 is installed
OR file-32bit-4.24-43.27 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 11 SP4 is installed
AND Package Information
mozilla-nspr-4.10.9-11 is installed
OR mozilla-nspr-32bit-4.10.9-11 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 is installed
AND Package Information
dbus-1-1.8.12-6 is installed
OR dbus-1-x11-1.8.12-6 is installed
OR libdbus-1-3-1.8.12-6 is installed
OR libdbus-1-3-32bit-1.8.12-6 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP1 is installed
AND p7zip-9.20.1-6 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP2 is installed
AND Package Information
libraptor2-0-2.0.10-3 is installed
OR raptor-2.0.10-3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP3 is installed
AND Package Information
gnutls-3.3.27-1 is installed
OR libgnutls28-3.3.27-1 is installed
OR libgnutls28-32bit-3.3.27-1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP4 is installed
AND Package Information
libpython3_4m1_0-3.4.6-25.16 is installed
OR python3-base-3.4.6-25.16 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Server Applications 15 is installed
AND Package Information
libwsman-devel-2.6.7-3.3 is installed
OR libwsman3-2.6.7-3.3 is installed
OR openwsman-2.6.7-3.3 is installed
OR openwsman-server-2.6.7-3.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed
AND Package Information
salt-3000-6.37 is installed
OR salt-api-3000-6.37 is installed
OR salt-cloud-3000-6.37 is installed
OR salt-fish-completion-3000-6.37 is installed
OR salt-master-3000-6.37 is installed
OR salt-proxy-3000-6.37 is installed
OR salt-ssh-3000-6.37 is installed
OR salt-standalone-formulas-configuration-3000-6.37 is installed
OR salt-syndic-3000-6.37 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP1 is installed
AND git-core-1.8.5.6-11 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP1-LTSS is installed
AND Package Information
kgraft-patch-3_12_74-60_64_54-default-9-2 is installed
OR kgraft-patch-3_12_74-60_64_54-xen-9-2 is installed
OR kgraft-patch-SLE12-SP1_Update_19-9-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2 is installed
AND libXvMC1-1.0.8-3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-BCL is installed
AND Package Information
libecpg6-10.9-1.12 is installed
OR libpq5-10.9-1.12 is installed
OR libpq5-32bit-10.9-1.12 is installed
OR postgresql10-10.9-1.12 is installed
OR postgresql10-contrib-10.9-1.12 is installed
OR postgresql10-docs-10.9-1.12 is installed
OR postgresql10-libs-10.9-1.12 is installed
OR postgresql10-plperl-10.9-1.12 is installed
OR postgresql10-plpython-10.9-1.12 is installed
OR postgresql10-pltcl-10.9-1.12 is installed
OR postgresql10-server-10.9-1.12 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
AND Package Information
openssh-7.2p2-74.25 is installed
OR openssh-askpass-gnome-7.2p2-74.25 is installed
OR openssh-fips-7.2p2-74.25 is installed
OR openssh-helpers-7.2p2-74.25 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-LTSS is installed
AND Package Information
kgraft-patch-4_4_74-92_35-default-9-2 is installed
OR kgraft-patch-SLE12-SP2_Update_12-9-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3 is installed
AND Package Information
cron-4.2-58 is installed
OR cronie-1.4.11-58 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-BCL is installed
AND Package Information
libpython2_7-1_0-2.7.13-28.31 is installed
OR libpython2_7-1_0-32bit-2.7.13-28.31 is installed
OR python-2.7.13-28.31 is installed
OR python-32bit-2.7.13-28.31 is installed
OR python-base-2.7.13-28.31 is installed
OR python-base-32bit-2.7.13-28.31 is installed
OR python-curses-2.7.13-28.31 is installed
OR python-demo-2.7.13-28.31 is installed
OR python-devel-2.7.13-28.31 is installed
OR python-doc-2.7.13-28.31 is installed
OR python-doc-pdf-2.7.13-28.31 is installed
OR python-gdbm-2.7.13-28.31 is installed
OR python-idle-2.7.13-28.31 is installed
OR python-tk-2.7.13-28.31 is installed
OR python-xml-2.7.13-28.31 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-ESPOS is installed
AND squid-3.5.21-26.17 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-LTSS is installed
AND Package Information
bzip2-1.0.6-30.8 is installed
OR bzip2-doc-1.0.6-30.8 is installed
OR libbz2-1-1.0.6-30.8 is installed
OR libbz2-1-32bit-1.0.6-30.8 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
AND Package Information
cups-1.7.5-20.17 is installed
OR cups-client-1.7.5-20.17 is installed
OR cups-libs-1.7.5-20.17 is installed
OR cups-libs-32bit-1.7.5-20.17 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP4 is installed
AND axis-1.4-290.3 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 6 is installed
AND Package Information
openvpn-2.3.8-16.20 is installed
OR openvpn-auth-pam-plugin-2.3.8-16.20 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 7 is installed
AND Package Information
MozillaFirefox-52.8.1esr-109.34 is installed
OR MozillaFirefox-devel-52.8.1esr-109.34 is installed
OR MozillaFirefox-translations-52.8.1esr-109.34 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 8 is installed
AND ansible-2.4.6.0-3.3 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud Crowbar 8 is installed
AND Package Information
libmysqlclient18-10.0.38-29.27 is installed
OR mariadb-10.0.38-29.27 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud Crowbar 9 is installed
AND python-Django1-1.11.23-3.9 is installed
|