Oval Definition:	oval:org.opensuse.security:def:5452
Revision Date: 2020-12-02 Version: 1 Title: Security update for qemu (Moderate) Description: This update for qemu fixes the following issues: Security issues fixed: - CVE-2020-1983: Fixed a use-after-free in the ip_reass function of slirp (bsc#1170940). - CVE-2019-20382: Fixed a potential DoS due to a memory leak in VNC disconnect (bsc#1165776). - CVE-2020-1711: Fixed a potential OOB access in the iSCSI client code (bsc#1166240). - CVE-2020-8608: Fixed a potential OOB access in slirp (bsc#1163018). - CVE-2020-7039: Fixed a potential OOB access in slirp (bsc#1161066). - Fixed multiple potential DoS issues in SLIRP, similar to CVE-2019-6778 (bsc#1123156). Non-security issue fixed: - Miscellaneous fixes to the in-package support documentation. Family: unix Class: patch Status: Reference(s): 1123156 1161066 1163018 1165776 1166240 1170940 1173998 CVE-2007-6720 CVE-2009-0037 CVE-2009-0179 CVE-2009-0945 CVE-2009-2417 CVE-2009-2666 CVE-2009-3995 CVE-2009-3996 CVE-2010-1167 CVE-2010-1205 CVE-2010-2546 CVE-2011-1947 CVE-2011-2054 CVE-2011-2501 CVE-2011-2690 CVE-2011-2691 CVE-2011-2692 CVE-2011-3026 CVE-2011-3048 CVE-2011-3172 CVE-2011-3193 CVE-2011-3328 CVE-2011-3389 CVE-2011-3464 CVE-2011-3602 CVE-2011-3922 CVE-2012-0037 CVE-2012-2141 CVE-2012-3386 CVE-2012-3466 CVE-2012-3482 CVE-2012-4929 CVE-2012-6093 CVE-2013-0249 CVE-2013-0254 CVE-2013-1944 CVE-2013-2063 CVE-2013-2174 CVE-2013-4545 CVE-2013-4549 CVE-2014-0015 CVE-2014-0138 CVE-2014-0139 CVE-2014-0190 CVE-2014-2284 CVE-2014-2285 CVE-2014-3565 CVE-2014-3613 CVE-2014-3620 CVE-2014-3707 CVE-2014-8150 CVE-2014-9474 CVE-2015-0295 CVE-2015-1858 CVE-2015-1859 CVE-2015-1860 CVE-2015-3143 CVE-2015-3144 CVE-2015-3145 CVE-2015-3148 CVE-2015-3153 CVE-2015-5621 CVE-2016-0755 CVE-2016-5419 CVE-2016-5420 CVE-2016-5421 CVE-2016-7141 CVE-2019-20382 CVE-2019-6778 CVE-2020-13753 CVE-2020-1711 CVE-2020-1983 CVE-2020-7039 CVE-2020-8608 CVE-2020-9802 CVE-2020-9803 CVE-2020-9805 CVE-2020-9806 CVE-2020-9807 CVE-2020-9843 CVE-2020-9850 SUSE-SU-2020:1523-1 SUSE-SU-2020:1990-1 Platform(s): openSUSE 13.1 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise for SAP 12 SUSE Linux Enterprise for SAP 12 SP1 SUSE Linux Enterprise for SAP 12 SP2 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Live Patching 12 SP3 SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for Legacy Software 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Web Scripting 12 SUSE Linux Enterprise Point of Sale 12 SP2 SUSE Linux Enterprise Real Time Extension 12 SP1 SUSE Linux Enterprise Real Time Extension 12 SP2 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP1-LTSS SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE OpenStack Cloud 5 Product(s): Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information libpython2_6-1_0-2.6.9-0.27.1 is installed OR libpython2_6-1_0-32bit-2.6.9-0.27.1 is installed OR python-2.6.9-0.27.1 is installed OR python-base-2.6.9-0.27.1 is installed OR python-base-32bit-2.6.9-0.27.1 is installed OR python-curses-2.6.9-0.27.1 is installed OR python-devel-2.6.9-0.27.1 is installed OR python-tk-2.6.9-0.27.1 is installed OR python-xml-2.6.9-0.27.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information libsnmp15-5.4.2.1-8.12.24.1 is installed OR libsnmp15-32bit-5.4.2.1-8.12.24.1 is installed OR net-snmp-5.4.2.1-8.12.24.1 is installed OR perl-SNMP-5.4.2.1-8.12.24.1 is installed OR snmp-mibs-5.4.2.1-8.12.24.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information libmikmod3-3.2.0-4 is installed OR libmikmod3-32bit-3.2.0-4 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information curl-7.37.0-28 is installed OR libcurl4-7.37.0-28 is installed OR libcurl4-32bit-7.37.0-28 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND autofs-5.0.9-27 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information colord-1.3.3-12 is installed OR colord-gtk-lang-0.1.26-6 is installed OR colord-lang-1.3.3-12 is installed OR libcolord-gtk1-0.1.26-6 is installed OR libcolord2-1.3.3-12 is installed OR libcolord2-32bit-1.3.3-12 is installed OR libcolorhug2-1.3.3-12 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 is installed AND Package Information openssh-6.6p1-52.1 is installed OR openssh-askpass-gnome-6.6p1-52.1 is installed OR openssh-fips-6.6p1-52.1 is installed OR openssh-helpers-6.6p1-52.1 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 SP1 is installed AND Package Information bind-9.9.9P1-62.1 is installed OR bind-chrootenv-9.9.9P1-62.1 is installed OR bind-devel-9.9.9P1-62.1 is installed OR bind-doc-9.9.9P1-62.1 is installed OR bind-libs-9.9.9P1-62.1 is installed OR bind-libs-32bit-9.9.9P1-62.1 is installed OR bind-utils-9.9.9P1-62.1 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 SP2 is installed AND Package Information compat-openssl098-0.9.8j-105.1 is installed OR libopenssl0_9_8-0.9.8j-105.1 is installed Definition Synopsis SUSE Linux Enterprise High Performance Computing 12 SP5 is installed AND Package Information freeradius-server-3.0.19-1 is installed OR freeradius-server-doc-3.0.19-1 is installed OR freeradius-server-krb5-3.0.19-1 is installed OR freeradius-server-ldap-3.0.19-1 is installed OR freeradius-server-libs-3.0.19-1 is installed OR freeradius-server-mysql-3.0.19-1 is installed OR freeradius-server-perl-3.0.19-1 is installed OR freeradius-server-postgresql-3.0.19-1 is installed OR freeradius-server-python-3.0.19-1 is installed OR freeradius-server-sqlite-3.0.19-1 is installed OR freeradius-server-utils-3.0.19-1 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 SP3 is installed AND Package Information kgraft-patch-4_4_82-6_6-default-1-2 is installed OR kgraft-patch-SLE12-SP3_Update_2-1-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Advanced Systems Management 12 is installed AND Package Information salt-2016.11.4-46.7.1 is installed OR salt-api-2016.11.4-46.7.1 is installed OR salt-bash-completion-2016.11.4-46.7.1 is installed OR salt-cloud-2016.11.4-46.7.1 is installed OR salt-doc-2016.11.4-46.7.1 is installed OR salt-master-2016.11.4-46.7.1 is installed OR salt-minion-2016.11.4-46.7.1 is installed OR salt-proxy-2016.11.4-46.7.1 is installed OR salt-ssh-2016.11.4-46.7.1 is installed OR salt-syndic-2016.11.4-46.7.1 is installed OR salt-zsh-completion-2016.11.4-46.7.1 is installed Definition Synopsis SUSE Linux Enterprise Module for Containers 12 is installed AND docker-1.8.3-49.1 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 12 is installed AND Package Information java-1_6_0-ibm-1.6.0_sr16.1-5 is installed OR java-1_6_0-ibm-fonts-1.6.0_sr16.1-5 is installed OR java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5 is installed OR java-1_6_0-ibm-plugin-1.6.0_sr16.1-5 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 12 is installed AND python-pycrypto-2.6.1-1 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 12 is installed AND Package Information libpython3_4m1_0-3.4.1-2 is installed OR python3-base-3.4.1-2 is installed Definition Synopsis SUSE Linux Enterprise Point of Sale 12 SP2 is installed AND Package Information salt-2016.11.4-46.7.1 is installed OR salt-minion-2016.11.4-46.7.1 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP1 is installed AND Package Information kernel-compute-3.12.58-14.1 is installed OR kernel-compute-base-3.12.58-14.1 is installed OR kernel-compute-devel-3.12.58-14.1 is installed OR kernel-compute_debug-3.12.58-14.1 is installed OR kernel-compute_debug-devel-3.12.58-14.1 is installed OR kernel-devel-rt-3.12.58-14.1 is installed OR kernel-rt-3.12.58-14.1 is installed OR kernel-rt-base-3.12.58-14.1 is installed OR kernel-rt-devel-3.12.58-14.1 is installed OR kernel-rt_debug-3.12.58-14.1 is installed OR kernel-rt_debug-devel-3.12.58-14.1 is installed OR kernel-source-rt-3.12.58-14.1 is installed OR kernel-syms-rt-3.12.58-14.1 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP2 is installed AND Package Information cluster-md-kmp-rt-4.4.88-18.1 is installed OR cluster-network-kmp-rt-4.4.88-18.1 is installed OR dlm-kmp-rt-4.4.88-18.1 is installed OR gfs2-kmp-rt-4.4.88-18.1 is installed OR kernel-devel-rt-4.4.88-18.1 is installed OR kernel-rt-4.4.88-18.1 is installed OR kernel-rt-base-4.4.88-18.1 is installed OR kernel-rt-devel-4.4.88-18.1 is installed OR kernel-rt_debug-4.4.88-18.1 is installed OR kernel-rt_debug-devel-4.4.88-18.1 is installed OR kernel-source-rt-4.4.88-18.1 is installed OR kernel-syms-rt-4.4.88-18.1 is installed OR ocfs2-kmp-rt-4.4.88-18.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 is installed AND mutt-1.5.17-42.33.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP1-LTSS is installed AND Package Information java-1_4_2-ibm-1.4.2_sr13.18-0.4.1 is installed OR java-1_4_2-ibm-jdbc-1.4.2_sr13.18-0.4.1 is installed OR java-1_4_2-ibm-plugin-1.4.2_sr13.18-0.4.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2 is installed AND gd-2.0.36.RC1-52.18 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3 is installed AND NetworkManager-gnome-0.7.1-5.22.28 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND ant-1.9.4-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information aaa_base-13.2+git20140911.61c1681-9 is installed OR aaa_base-extras-13.2+git20140911.61c1681-9 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information tar-1.27.1-11.1 is installed OR tar-lang-1.27.1-11.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information libsystemd0-228-142 is installed OR libsystemd0-32bit-228-142 is installed OR libudev1-228-142 is installed OR libudev1-32bit-228-142 is installed OR systemd-228-142 is installed OR systemd-32bit-228-142 is installed OR systemd-bash-completion-228-142 is installed OR systemd-sysvinit-228-142 is installed OR udev-228-142 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information aaa_base-13.2+git20140911.61c1681-38.8 is installed OR aaa_base-extras-13.2+git20140911.61c1681-38.8 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND Package Information gnome-shell-3.20.4-70 is installed OR gnome-shell-browser-plugin-3.20.4-70 is installed OR gnome-shell-lang-3.20.4-70 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 is installed AND Package Information kgraft-patch-3_12_61-52_69-default-2-4 is installed OR kgraft-patch-3_12_61-52_69-xen-2-4 is installed OR kgraft-patch-SLE12_Update_20-2-4 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed AND Package Information kgraft-patch-3_12_74-60_64_40-default-3-2 is installed OR kgraft-patch-3_12_74-60_64_40-xen-3-2 is installed OR kgraft-patch-SLE12-SP1_Update_15-3-2 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information qemu-2.11.2-9.36 is installed OR qemu-block-curl-2.11.2-9.36 is installed OR qemu-block-iscsi-2.11.2-9.36 is installed OR qemu-block-rbd-2.11.2-9.36 is installed OR qemu-block-ssh-2.11.2-9.36 is installed OR qemu-guest-agent-2.11.2-9.36 is installed OR qemu-ipxe-1.0.0+-9.36 is installed OR qemu-kvm-2.11.2-9.36 is installed OR qemu-lang-2.11.2-9.36 is installed OR qemu-ppc-2.11.2-9.36 is installed OR qemu-seabios-1.11.0-9.36 is installed OR qemu-sgabios-8-9.36 is installed OR qemu-tools-2.11.2-9.36 is installed OR qemu-vgabios-1.11.0-9.36 is installed OR qemu-x86-2.11.2-9.36 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND Package Information OpenEXR-32bit-1.6.1-83.17.1 is installed OR OpenEXR-devel-1.6.1-83.17.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND Package Information dbus-1-devel-1.8.8-1 is installed OR dbus-1-devel-doc-1.8.8-1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND libgypsy-devel-0.9-6 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND Package Information NetworkManager-1.0.12-13.6 is installed OR NetworkManager-devel-1.0.12-13.6 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND Package Information ImageMagick-6.8.8.1-5 is installed OR libMagick++-6_Q16-3-6.8.8.1-5 is installed OR libMagickCore-6_Q16-1-32bit-6.8.8.1-5 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND bash-lang-4.2-75 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND Package Information libpcrecpp0-8.39-5.1 is installed OR libpcrecpp0-32bit-8.39-5.1 is installed OR pcre-8.39-5.1 is installed
BACK