Oval Definition:	oval:org.opensuse.security:def:53332
Revision Date: 2020-12-01 Version: 1 Title: Security update for libvirt (Important) Description: This update for libvirt fixes the following issues: - CVE-2020-15708: Added a note to libvirtd.conf about polkit auth in SUSE distros (bsc#1174955). - CVE-2020-25637: Fixed a double free in qemuAgentGetInterfaces() (bsc#1177155). - qemu: Adjust max memlock on mdev hotplug (bsc#1177480). - Xen: Don't add dom0 twice on driver reload (bsc#1176430). - virdevmapper: Handle kernel without device-mapper support (bsc#1175465). - Fixed an issue where building was failing (bsc#1175574). Family: unix Class: patch Status: Reference(s): 1023895 1032680 1036244 1052261 1054028 1056995 1059066 1059101 1059155 1061265 1138172 1138173 1174955 1175465 1175574 1176430 1177155 1177480 903543 906689 931625 931626 931627 931628 932770 932790 932996 935338 935993 937766 945582 947518 952491 955210 980486 CVE-2008-3522 CVE-2009-0159 CVE-2009-1252 CVE-2011-4349 CVE-2011-4516 CVE-2011-4517 CVE-2012-0035 CVE-2013-4238 CVE-2013-5211 CVE-2013-7447 CVE-2014-3421 CVE-2014-3422 CVE-2014-3423 CVE-2014-3424 CVE-2014-8137 CVE-2014-8138 CVE-2014-8157 CVE-2014-8158 CVE-2014-9029 CVE-2014-9293 CVE-2014-9294 CVE-2014-9295 CVE-2014-9296 CVE-2014-9297 CVE-2014-9298 CVE-2015-0794 CVE-2015-1798 CVE-2015-1799 CVE-2015-3209 CVE-2015-3405 CVE-2015-4000 CVE-2015-4103 CVE-2015-4104 CVE-2015-4105 CVE-2015-4106 CVE-2015-4163 CVE-2015-4164 CVE-2015-5203 CVE-2015-5219 CVE-2015-5221 CVE-2015-5300 CVE-2015-6908 CVE-2015-7691 CVE-2015-7692 CVE-2015-7701 CVE-2015-7702 CVE-2015-7703 CVE-2015-7704 CVE-2015-7705 CVE-2015-7848 CVE-2015-7849 CVE-2015-7850 CVE-2015-7851 CVE-2015-7852 CVE-2015-7853 CVE-2015-7854 CVE-2015-7855 CVE-2015-7871 CVE-2015-7973 CVE-2015-7974 CVE-2015-7975 CVE-2015-7976 CVE-2015-7977 CVE-2015-7978 CVE-2015-7979 CVE-2015-8138 CVE-2015-8139 CVE-2015-8140 CVE-2015-8158 CVE-2016-0772 CVE-2016-1000110 CVE-2016-10251 CVE-2016-1547 CVE-2016-1548 CVE-2016-1549 CVE-2016-1550 CVE-2016-1551 CVE-2016-1577 CVE-2016-1602 CVE-2016-1867 CVE-2016-2089 CVE-2016-2116 CVE-2016-2516 CVE-2016-2517 CVE-2016-2518 CVE-2016-2519 CVE-2016-4953 CVE-2016-4954 CVE-2016-4955 CVE-2016-4956 CVE-2016-4957 CVE-2016-5636 CVE-2016-5699 CVE-2016-7426 CVE-2016-7427 CVE-2016-7428 CVE-2016-7429 CVE-2016-7431 CVE-2016-7433 CVE-2016-7434 CVE-2016-8654 CVE-2016-8690 CVE-2016-8691 CVE-2016-8692 CVE-2016-8693 CVE-2016-8880 CVE-2016-8881 CVE-2016-8882 CVE-2016-8883 CVE-2016-8884 CVE-2016-8885 CVE-2016-8886 CVE-2016-8887 CVE-2016-9042 CVE-2016-9310 CVE-2016-9311 CVE-2016-9395 CVE-2016-9398 CVE-2016-9560 CVE-2016-9583 CVE-2016-9591 CVE-2016-9600 CVE-2017-1000158 CVE-2017-11462 CVE-2017-12424 CVE-2017-14517 CVE-2017-14518 CVE-2017-14520 CVE-2017-14977 CVE-2017-18207 CVE-2017-5498 CVE-2017-6451 CVE-2017-6458 CVE-2017-6460 CVE-2017-6462 CVE-2017-6463 CVE-2017-6464 CVE-2017-6850 CVE-2017-8422 CVE-2018-1000030 CVE-2019-11039 CVE-2019-11040 CVE-2020-15708 CVE-2020-25637 SUSE-SU-2015:1042-1 SUSE-SU-2015:2065-1 SUSE-SU-2016:0224-1 SUSE-SU-2017:1335-1 SUSE-SU-2017:2659-1 SUSE-SU-2017:2947-1 SUSE-SU-2017:2952-1 SUSE-SU-2019:1832-1 SUSE-SU-2020:3037-1 Platform(s): openSUSE Leap 15.0 openSUSE Leap 15.1 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Web Scripting 15 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND Package Information java-10-openjdk-10.0.1.0-lp150.1 is installed OR java-10-openjdk-headless-10.0.1.0-lp150.1 is installed Definition Synopsis openSUSE Leap 15.1 is installed AND Package Information GraphicsMagick-1.3.29-lp151.4.3 is installed OR GraphicsMagick-devel-1.3.29-lp151.4.3 is installed OR libGraphicsMagick++-Q16-12-1.3.29-lp151.4.3 is installed OR libGraphicsMagick++-devel-1.3.29-lp151.4.3 is installed OR libGraphicsMagick-Q16-3-1.3.29-lp151.4.3 is installed OR libGraphicsMagick3-config-1.3.29-lp151.4.3 is installed OR libGraphicsMagickWand-Q16-2-1.3.29-lp151.4.3 is installed OR perl-GraphicsMagick-1.3.29-lp151.4.3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information MozillaFirefox-10.0.9-0.3 is installed OR MozillaFirefox-branding-SLED-7-0.6.7 is installed OR MozillaFirefox-translations-10.0.9-0.3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information MozillaFirefox-24.5.0esr-0.8 is installed OR MozillaFirefox-branding-SLED-24-0.7 is installed OR MozillaFirefox-translations-24.5.0esr-0.8 is installed OR libfreebl3-3.16-0.8 is installed OR libfreebl3-32bit-3.16-0.8 is installed OR libsoftokn3-3.16-0.8 is installed OR libsoftokn3-32bit-3.16-0.8 is installed OR mozilla-nspr-4.10.4-0.3 is installed OR mozilla-nspr-32bit-4.10.4-0.3 is installed OR mozilla-nss-3.16-0.8 is installed OR mozilla-nss-32bit-3.16-0.8 is installed OR mozilla-nss-tools-3.16-0.8 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information java-1_7_0-openjdk-1.7.0.91-0.14 is installed OR java-1_7_0-openjdk-demo-1.7.0.91-0.14 is installed OR java-1_7_0-openjdk-devel-1.7.0.91-0.14 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information xen-4.4.2_06-21 is installed OR xen-kmp-default-4.4.2_06_k3.12.39_47-21 is installed OR xen-libs-4.4.2_06-21 is installed OR xen-libs-32bit-4.4.2_06-21 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information libldap-2_4-2-2.4.41-18.13 is installed OR libldap-2_4-2-32bit-2.4.41-18.13 is installed OR openldap2-client-2.4.41-18.13 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND supportutils-3.0-85 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information emacs-24.3-19 is installed OR emacs-info-24.3-19 is installed OR emacs-x11-24.3-19 is installed OR etags-24.3-19 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information colord-1.3.3-12 is installed OR colord-gtk-lang-0.1.26-6 is installed OR colord-lang-1.3.3-12 is installed OR libcolord-gtk1-0.1.26-6 is installed OR libcolord2-1.3.3-12 is installed OR libcolord2-32bit-1.3.3-12 is installed OR libcolorhug2-1.3.3-12 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed AND Package Information libvirt-5.1.0-8.24 is installed OR libvirt-admin-5.1.0-8.24 is installed OR libvirt-bash-completion-5.1.0-8.24 is installed OR libvirt-client-5.1.0-8.24 is installed OR libvirt-daemon-5.1.0-8.24 is installed OR libvirt-daemon-config-network-5.1.0-8.24 is installed OR libvirt-daemon-config-nwfilter-5.1.0-8.24 is installed OR libvirt-daemon-driver-interface-5.1.0-8.24 is installed OR libvirt-daemon-driver-libxl-5.1.0-8.24 is installed OR libvirt-daemon-driver-lxc-5.1.0-8.24 is installed OR libvirt-daemon-driver-network-5.1.0-8.24 is installed OR libvirt-daemon-driver-nodedev-5.1.0-8.24 is installed OR libvirt-daemon-driver-nwfilter-5.1.0-8.24 is installed OR libvirt-daemon-driver-qemu-5.1.0-8.24 is installed OR libvirt-daemon-driver-secret-5.1.0-8.24 is installed OR libvirt-daemon-driver-storage-5.1.0-8.24 is installed OR libvirt-daemon-driver-storage-core-5.1.0-8.24 is installed OR libvirt-daemon-driver-storage-disk-5.1.0-8.24 is installed OR libvirt-daemon-driver-storage-iscsi-5.1.0-8.24 is installed OR libvirt-daemon-driver-storage-logical-5.1.0-8.24 is installed OR libvirt-daemon-driver-storage-mpath-5.1.0-8.24 is installed OR libvirt-daemon-driver-storage-rbd-5.1.0-8.24 is installed OR libvirt-daemon-driver-storage-scsi-5.1.0-8.24 is installed OR libvirt-daemon-hooks-5.1.0-8.24 is installed OR libvirt-daemon-lxc-5.1.0-8.24 is installed OR libvirt-daemon-qemu-5.1.0-8.24 is installed OR libvirt-daemon-xen-5.1.0-8.24 is installed OR libvirt-devel-5.1.0-8.24 is installed OR libvirt-doc-5.1.0-8.24 is installed OR libvirt-lock-sanlock-5.1.0-8.24 is installed OR libvirt-nss-5.1.0-8.24 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 is installed AND Package Information apache2-mod_php7-7.2.5-4.35 is installed OR php7-7.2.5-4.35 is installed OR php7-bcmath-7.2.5-4.35 is installed OR php7-bz2-7.2.5-4.35 is installed OR php7-calendar-7.2.5-4.35 is installed OR php7-ctype-7.2.5-4.35 is installed OR php7-curl-7.2.5-4.35 is installed OR php7-dba-7.2.5-4.35 is installed OR php7-devel-7.2.5-4.35 is installed OR php7-dom-7.2.5-4.35 is installed OR php7-enchant-7.2.5-4.35 is installed OR php7-exif-7.2.5-4.35 is installed OR php7-fastcgi-7.2.5-4.35 is installed OR php7-fileinfo-7.2.5-4.35 is installed OR php7-fpm-7.2.5-4.35 is installed OR php7-ftp-7.2.5-4.35 is installed OR php7-gd-7.2.5-4.35 is installed OR php7-gettext-7.2.5-4.35 is installed OR php7-gmp-7.2.5-4.35 is installed OR php7-iconv-7.2.5-4.35 is installed OR php7-intl-7.2.5-4.35 is installed OR php7-json-7.2.5-4.35 is installed OR php7-ldap-7.2.5-4.35 is installed OR php7-mbstring-7.2.5-4.35 is installed OR php7-mysql-7.2.5-4.35 is installed OR php7-odbc-7.2.5-4.35 is installed OR php7-opcache-7.2.5-4.35 is installed OR php7-openssl-7.2.5-4.35 is installed OR php7-pcntl-7.2.5-4.35 is installed OR php7-pdo-7.2.5-4.35 is installed OR php7-pear-7.2.5-4.35 is installed OR php7-pear-Archive_Tar-7.2.5-4.35 is installed OR php7-pgsql-7.2.5-4.35 is installed OR php7-phar-7.2.5-4.35 is installed OR php7-posix-7.2.5-4.35 is installed OR php7-shmop-7.2.5-4.35 is installed OR php7-snmp-7.2.5-4.35 is installed OR php7-soap-7.2.5-4.35 is installed OR php7-sockets-7.2.5-4.35 is installed OR php7-sodium-7.2.5-4.35 is installed OR php7-sqlite-7.2.5-4.35 is installed OR php7-sysvmsg-7.2.5-4.35 is installed OR php7-sysvsem-7.2.5-4.35 is installed OR php7-sysvshm-7.2.5-4.35 is installed OR php7-tokenizer-7.2.5-4.35 is installed OR php7-wddx-7.2.5-4.35 is installed OR php7-xmlreader-7.2.5-4.35 is installed OR php7-xmlrpc-7.2.5-4.35 is installed OR php7-xmlwriter-7.2.5-4.35 is installed OR php7-xsl-7.2.5-4.35 is installed OR php7-zip-7.2.5-4.35 is installed OR php7-zlib-7.2.5-4.35 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information dhcp-4.3.3-2 is installed OR dhcp-client-4.3.3-2 is installed OR dhcp-relay-4.3.3-2 is installed OR dhcp-server-4.3.3-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kgraft-patch-3_12_69-60_64_35-default-3-3 is installed OR kgraft-patch-3_12_69-60_64_35-xen-3-3 is installed OR kgraft-patch-SLE12-SP1_Update_14-3-3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information libudisks2-0-2.1.3-1 is installed OR udisks2-2.1.3-1 is installed OR udisks2-lang-2.1.3-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information libopenssl-devel-1.0.2j-60.49 is installed OR libopenssl1_0_0-1.0.2j-60.49 is installed OR libopenssl1_0_0-32bit-1.0.2j-60.49 is installed OR libopenssl1_0_0-hmac-1.0.2j-60.49 is installed OR libopenssl1_0_0-hmac-32bit-1.0.2j-60.49 is installed OR openssl-1.0.2j-60.49 is installed OR openssl-doc-1.0.2j-60.49 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information kernel-firmware-20170530-21.22 is installed OR ucode-amd-20170530-21.22 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information kgraft-patch-4_4_59-92_17-default-10-2 is installed OR kgraft-patch-SLE12-SP2_Update_7-10-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information evince-3.20.1-5 is installed OR evince-browser-plugin-3.20.1-5 is installed OR evince-lang-3.20.1-5 is installed OR evince-plugin-djvudocument-3.20.1-5 is installed OR evince-plugin-dvidocument-3.20.1-5 is installed OR evince-plugin-pdfdocument-3.20.1-5 is installed OR evince-plugin-psdocument-3.20.1-5 is installed OR evince-plugin-tiffdocument-3.20.1-5 is installed OR evince-plugin-xpsdocument-3.20.1-5 is installed OR libevdocument3-4-3.20.1-5 is installed OR libevview3-3-3.20.1-5 is installed OR nautilus-evince-3.20.1-5 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-BCL is installed AND Package Information java-1_7_1-ibm-1.7.1_sr4.60-38.47 is installed OR java-1_7_1-ibm-alsa-1.7.1_sr4.60-38.47 is installed OR java-1_7_1-ibm-devel-1.7.1_sr4.60-38.47 is installed OR java-1_7_1-ibm-jdbc-1.7.1_sr4.60-38.47 is installed OR java-1_7_1-ibm-plugin-1.7.1_sr4.60-38.47 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND Package Information libecpg6-10.9-1.12 is installed OR libpq5-10.9-1.12 is installed OR libpq5-32bit-10.9-1.12 is installed OR postgresql10-10.9-1.12 is installed OR postgresql10-contrib-10.9-1.12 is installed OR postgresql10-docs-10.9-1.12 is installed OR postgresql10-libs-10.9-1.12 is installed OR postgresql10-plperl-10.9-1.12 is installed OR postgresql10-plpython-10.9-1.12 is installed OR postgresql10-pltcl-10.9-1.12 is installed OR postgresql10-server-10.9-1.12 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND ucode-intel-20190618-13.47 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information libpython3_4m1_0-3.4.6-25.16 is installed OR python3-3.4.6-25.16 is installed OR python3-base-3.4.6-25.16 is installed OR python3-curses-3.4.6-25.16 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information MozillaFirefox-52.9.0esr-109.38 is installed OR MozillaFirefox-translations-52.9.0esr-109.38 is installed Definition Synopsis SUSE OpenStack Cloud 6 is installed AND Package Information cpp48-4.8.5-31.3 is installed OR gcc48-4.8.5-31.3 is installed OR gcc48-32bit-4.8.5-31.3 is installed OR gcc48-c++-4.8.5-31.3 is installed OR gcc48-info-4.8.5-31.3 is installed OR gcc48-locale-4.8.5-31.3 is installed OR libasan0-4.8.5-31.3 is installed OR libasan0-32bit-4.8.5-31.3 is installed OR libstdc++48-devel-4.8.5-31.3 is installed OR libstdc++48-devel-32bit-4.8.5-31.3 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND Package Information dnsmasq-2.78-18.3 is installed OR dnsmasq-utils-2.78-18.3 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND Package Information MozillaFirefox-68.1.0-109.89 is installed OR MozillaFirefox-branding-SLE-68-32.8 is installed OR MozillaFirefox-translations-common-68.1.0-109.89 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND Package Information python-PyYAML-5.1.2-26.12 is installed OR python3-PyYAML-5.1.2-26.12 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 9 is installed AND python-SQLAlchemy-1.2.10-3.3 is installed
BACK