Oval Definition:	oval:org.opensuse.security:def:55130
Revision Date: 2020-12-16 Version: 1 Title: Security update for spice-gtk (Important) Description: This update for spice-gtk fixes the following issues: - CVE-2018-10873: Fixed a potential heap corruption when demarshalling (bsc#1104448) - CVE-2018-10893: Fixed a buffer overflow on image lz checks (bsc#1101295) Family: unix Class: patch Status: Reference(s): 1020950 1024749 1045460 1050469 1052311 1052365 1052916 1077001 1086825 1092098 1101295 1104448 1106914 1108631 1108632 1115929 1129186 902367 952051 953516 953521 954980 970258 982426 983807 984442 984443 988729 CVE-2009-5044 CVE-2009-5080 CVE-2009-5081 CVE-2011-0421 CVE-2012-1162 CVE-2012-1163 CVE-2012-2812 CVE-2012-2813 CVE-2012-2814 CVE-2012-2836 CVE-2012-2837 CVE-2012-2840 CVE-2012-2841 CVE-2014-3710 CVE-2014-9756 CVE-2015-2331 CVE-2015-7805 CVE-2015-7981 CVE-2015-8126 CVE-2016-2140 CVE-2016-4428 CVE-2016-5362 CVE-2016-5363 CVE-2016-6328 CVE-2016-7586 CVE-2016-7589 CVE-2016-7592 CVE-2016-7599 CVE-2016-7623 CVE-2016-7632 CVE-2016-7635 CVE-2016-7639 CVE-2016-7641 CVE-2016-7645 CVE-2016-7652 CVE-2016-7654 CVE-2016-7656 CVE-2017-1000111 CVE-2017-1000112 CVE-2017-2350 CVE-2017-2354 CVE-2017-2355 CVE-2017-2356 CVE-2017-2362 CVE-2017-2363 CVE-2017-2364 CVE-2017-2365 CVE-2017-2366 CVE-2017-2369 CVE-2017-2371 CVE-2017-2373 CVE-2017-2496 CVE-2017-2510 CVE-2017-2538 CVE-2017-2539 CVE-2017-2885 CVE-2017-7018 CVE-2017-7030 CVE-2017-7034 CVE-2017-7037 CVE-2017-7039 CVE-2017-7046 CVE-2017-7048 CVE-2017-7055 CVE-2017-7056 CVE-2017-7061 CVE-2017-7064 CVE-2017-7544 CVE-2018-1000007 CVE-2018-1000301 CVE-2018-10873 CVE-2018-10893 CVE-2018-17097 CVE-2018-17098 CVE-2018-19211 CVE-2019-3838 SUSE-SU-2015:1979-1 SUSE-SU-2015:2017-1 SUSE-SU-2016:2143-1 SUSE-SU-2017:2130-1 SUSE-SU-2017:2150-1 SUSE-SU-2017:2933-1 SUSE-SU-2018:0217-1 SUSE-SU-2018:1327-1 SUSE-SU-2018:2835-1 SUSE-SU-2018:3967-1 SUSE-SU-2019:0096-1 SUSE-SU-2019:0719-1 SUSE-SU-2020:3841-1 Platform(s): openSUSE Leap 15.0 openSUSE Leap 15.1 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND Package Information curl-7.59.0-lp150.1 is installed OR libcurl4-7.59.0-lp150.1 is installed OR libcurl4-32bit-7.59.0-lp150.1 is installed Definition Synopsis openSUSE Leap 15.1 is installed AND Package Information libnetpbm-devel-10.80.1-lp151.4.3 is installed OR libnetpbm11-10.80.1-lp151.4.3 is installed OR libnetpbm11-32bit-10.80.1-lp151.4.3 is installed OR netpbm-10.80.1-lp151.4.3 is installed OR netpbm-vulnerable-10.80.1-lp151.4.3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information file-4.24-43.27 is installed OR file-32bit-4.24-43.27 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information libpng12-0-1.2.31-5.35 is installed OR libpng12-0-32bit-1.2.31-5.35 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information libjavascriptcoregtk-4_0-18-2.18.0-2.9 is installed OR libwebkit2gtk-4_0-37-2.18.0-2.9 is installed OR libwebkit2gtk3-lang-2.18.0-2.9 is installed OR typelib-1_0-JavaScriptCore-4_0-2.18.0-2.9 is installed OR typelib-1_0-WebKit2-4_0-2.18.0-2.9 is installed OR webkit2gtk-4_0-injected-bundles-2.18.0-2.9 is installed OR webkit2gtk3-2.18.0-2.9 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND groff-1.22.2-5 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND libzip2-0.11.1-9 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kgraft-patch-3_12_74-60_64_48-default-6-2 is installed OR kgraft-patch-3_12_74-60_64_48-xen-6-2 is installed OR kgraft-patch-SLE12-SP1_Update_17-6-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information bzip2-1.0.6-29 is installed OR bzip2-doc-1.0.6-29 is installed OR libbz2-1-1.0.6-29 is installed OR libbz2-1-32bit-1.0.6-29 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information libspice-client-glib-2_0-8-0.31-9.10.1 is installed OR libspice-client-glib-helper-0.31-9.10.1 is installed OR libspice-client-gtk-2_0-4-0.31-9.10.1 is installed OR libspice-client-gtk-3_0-4-0.31-9.10.1 is installed OR libspice-controller0-0.31-9.10.1 is installed OR typelib-1_0-SpiceClientGlib-2_0-0.31-9.10.1 is installed OR typelib-1_0-SpiceClientGtk-3_0-0.31-9.10.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information hostinfo-1.0.1-19.5 is installed OR supportutils-3.0-95.21 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information kgraft-patch-4_4_90-92_50-default-8-2 is installed OR kgraft-patch-SLE12-SP2_Update_15-8-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information fetchmail-6.3.26-12 is installed OR fetchmailconf-6.3.26-12 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-BCL is installed AND Package Information java-1_8_0-ibm-1.8.0_sr5.40-30.54 is installed OR java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54 is installed OR java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND Package Information java-1_7_1-ibm-1.7.1_sr4.50-38.41 is installed OR java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41 is installed OR java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41 is installed OR java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information kgraft-patch-4_4_180-94_97-default-9-2 is installed OR kgraft-patch-SLE12-SP3_Update_26-9-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information MozillaFirefox-60.3.0-109.50 is installed OR MozillaFirefox-translations-common-60.3.0-109.50 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information libXv1-1.0.10-7 is installed OR libXv1-32bit-1.0.10-7 is installed Definition Synopsis SUSE OpenStack Cloud 6 is installed AND Package Information openstack-ceilometer-5.0.4~a0~dev6-6 is installed OR openstack-ceilometer-agent-central-5.0.4~a0~dev6-6 is installed OR openstack-ceilometer-agent-compute-5.0.4~a0~dev6-6 is installed OR openstack-ceilometer-agent-ipmi-5.0.4~a0~dev6-6 is installed OR openstack-ceilometer-agent-notification-5.0.4~a0~dev6-6 is installed OR openstack-ceilometer-alarm-evaluator-5.0.4~a0~dev6-6 is installed OR openstack-ceilometer-alarm-notifier-5.0.4~a0~dev6-6 is installed OR openstack-ceilometer-api-5.0.4~a0~dev6-6 is installed OR openstack-ceilometer-collector-5.0.4~a0~dev6-6 is installed OR openstack-ceilometer-doc-5.0.4~a0~dev6-6 is installed OR openstack-ceilometer-polling-5.0.4~a0~dev6-6 is installed OR openstack-cinder-7.0.3~a0~dev2-7 is installed OR openstack-cinder-api-7.0.3~a0~dev2-7 is installed OR openstack-cinder-backup-7.0.3~a0~dev2-7 is installed OR openstack-cinder-doc-7.0.3~a0~dev2-7 is installed OR openstack-cinder-scheduler-7.0.3~a0~dev2-7 is installed OR openstack-cinder-volume-7.0.3~a0~dev2-7 is installed OR openstack-dashboard-8.0.2~a0~dev34-8 is installed OR openstack-glance-11.0.2~a0~dev13-7 is installed OR openstack-glance-doc-11.0.2~a0~dev13-7 is installed OR openstack-heat-5.0.2~a0~dev93-9 is installed OR openstack-heat-api-5.0.2~a0~dev93-9 is installed OR openstack-heat-api-cfn-5.0.2~a0~dev93-9 is installed OR openstack-heat-api-cloudwatch-5.0.2~a0~dev93-9 is installed OR openstack-heat-doc-5.0.2~a0~dev93-9 is installed OR openstack-heat-engine-5.0.2~a0~dev93-9 is installed OR openstack-heat-plugin-heat_docker-5.0.2~a0~dev93-9 is installed OR openstack-keystone-8.1.1~a0~dev13-3 is installed OR openstack-keystone-doc-8.1.1~a0~dev13-3 is installed OR openstack-manila-1.0.2~a0~dev11-9 is installed OR openstack-manila-api-1.0.2~a0~dev11-9 is installed OR openstack-manila-doc-1.0.2~a0~dev11-9 is installed OR openstack-manila-scheduler-1.0.2~a0~dev11-9 is installed OR openstack-manila-share-1.0.2~a0~dev11-9 is installed OR openstack-neutron-7.1.2~a0~dev29-10 is installed OR openstack-neutron-dhcp-agent-7.1.2~a0~dev29-10 is installed OR openstack-neutron-doc-7.1.2~a0~dev29-10 is installed OR openstack-neutron-fwaas-7.1.2~a0~dev1-6 is installed OR openstack-neutron-fwaas-doc-7.1.2~a0~dev1-6 is installed OR openstack-neutron-ha-tool-7.1.2~a0~dev29-10 is installed OR openstack-neutron-l3-agent-7.1.2~a0~dev29-10 is installed OR openstack-neutron-lbaas-7.1.2~a0~dev1-6 is installed OR openstack-neutron-lbaas-agent-7.1.2~a0~dev1-6 is installed OR openstack-neutron-lbaas-doc-7.1.2~a0~dev1-6 is installed OR openstack-neutron-linuxbridge-agent-7.1.2~a0~dev29-10 is installed OR openstack-neutron-metadata-agent-7.1.2~a0~dev29-10 is installed OR openstack-neutron-metering-agent-7.1.2~a0~dev29-10 is installed OR openstack-neutron-mlnx-agent-7.1.2~a0~dev29-10 is installed OR openstack-neutron-nvsd-agent-7.1.2~a0~dev29-10 is installed OR openstack-neutron-openvswitch-agent-7.1.2~a0~dev29-10 is installed OR openstack-neutron-restproxy-agent-7.1.2~a0~dev29-10 is installed OR openstack-neutron-server-7.1.2~a0~dev29-10 is installed OR openstack-nova-12.0.5~a0~dev2-7 is installed OR openstack-nova-api-12.0.5~a0~dev2-7 is installed OR openstack-nova-cells-12.0.5~a0~dev2-7 is installed OR openstack-nova-cert-12.0.5~a0~dev2-7 is installed OR openstack-nova-compute-12.0.5~a0~dev2-7 is installed OR openstack-nova-conductor-12.0.5~a0~dev2-7 is installed OR openstack-nova-console-12.0.5~a0~dev2-7 is installed OR openstack-nova-consoleauth-12.0.5~a0~dev2-7 is installed OR openstack-nova-doc-12.0.5~a0~dev2-7 is installed OR openstack-nova-novncproxy-12.0.5~a0~dev2-7 is installed OR openstack-nova-objectstore-12.0.5~a0~dev2-7 is installed OR openstack-nova-scheduler-12.0.5~a0~dev2-7 is installed OR openstack-nova-serialproxy-12.0.5~a0~dev2-7 is installed OR openstack-nova-vncproxy-12.0.5~a0~dev2-7 is installed OR openstack-resource-agents-1.0+git.1467079370.4f2c49d-7 is installed OR python-ceilometer-5.0.4~a0~dev6-6 is installed OR python-cinder-7.0.3~a0~dev2-7 is installed OR python-glance-11.0.2~a0~dev13-7 is installed OR python-heat-5.0.2~a0~dev93-9 is installed OR python-horizon-8.0.2~a0~dev34-8 is installed OR python-keystone-8.1.1~a0~dev13-3 is installed OR python-manila-1.0.2~a0~dev11-9 is installed OR python-networking-cisco-2.1.1-6 is installed OR python-neutron-7.1.2~a0~dev29-10 is installed OR python-neutron-fwaas-7.1.2~a0~dev1-6 is installed OR python-neutron-lbaas-7.1.2~a0~dev1-6 is installed OR python-nova-12.0.5~a0~dev2-7 is installed OR python-openstackclient-1.7.2-4 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND Package Information git-2.12.3-27.17 is installed OR git-core-2.12.3-27.17 is installed OR git-doc-2.12.3-27.17 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND cobbler-2.6.6-49.14 is installed Definition Synopsis SUSE OpenStack Cloud 9 is installed AND python-Django1-1.11.23-3.9 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 9 is installed AND Package Information crowbar-core-6.0+git.1566321308.1de18b9a4-3.7 is installed OR crowbar-core-branding-upstream-6.0+git.1566321308.1de18b9a4-3.7 is installed OR crowbar-ha-6.0+git.1566406179.7549de2-3.7 is installed OR crowbar-openstack-6.0+git.1566404979.41279a88e-3.7 is installed OR crowbar-ui-1.3.0+git.1563181545.65360af5-8 is installed OR openstack-ceilometer-11.0.2~dev14-3.7 is installed OR openstack-ceilometer-agent-central-11.0.2~dev14-3.7 is installed OR openstack-ceilometer-agent-compute-11.0.2~dev14-3.7 is installed OR openstack-ceilometer-agent-ipmi-11.0.2~dev14-3.7 is installed OR openstack-ceilometer-agent-notification-11.0.2~dev14-3.7 is installed OR openstack-ceilometer-polling-11.0.2~dev14-3.7 is installed OR openstack-cinder-13.0.7~dev3-3.7 is installed OR openstack-cinder-api-13.0.7~dev3-3.7 is installed OR openstack-cinder-backup-13.0.7~dev3-3.7 is installed OR openstack-cinder-scheduler-13.0.7~dev3-3.7 is installed OR openstack-cinder-volume-13.0.7~dev3-3.7 is installed OR openstack-designate-7.0.1~dev21-3.7 is installed OR openstack-designate-agent-7.0.1~dev21-3.7 is installed OR openstack-designate-api-7.0.1~dev21-3.7 is installed OR openstack-designate-central-7.0.1~dev21-3.7 is installed OR openstack-designate-producer-7.0.1~dev21-3.7 is installed OR openstack-designate-sink-7.0.1~dev21-3.7 is installed OR openstack-designate-worker-7.0.1~dev21-3.7 is installed OR openstack-heat-11.0.3~dev19-3.7 is installed OR openstack-heat-api-11.0.3~dev19-3.7 is installed OR openstack-heat-api-cfn-11.0.3~dev19-3.7 is installed OR openstack-heat-engine-11.0.3~dev19-3.7 is installed OR openstack-heat-plugin-heat_docker-11.0.3~dev19-3.7 is installed OR openstack-horizon-plugin-neutron-fwaas-ui-1.5.1~dev6-8 is installed OR openstack-horizon-plugin-neutron-lbaas-ui-5.0.1~dev7-8 is installed OR openstack-horizon-plugin-neutron-vpnaas-ui-1.4.1~dev7-8 is installed OR openstack-ironic-11.1.4~dev9-3.7 is installed OR openstack-ironic-api-11.1.4~dev9-3.7 is installed OR openstack-ironic-conductor-11.1.4~dev9-3.7 is installed OR openstack-ironic-python-agent-3.3.3~dev4-3.7 is installed OR openstack-keystone-14.1.1~dev8-3.7 is installed OR openstack-magnum-7.1.1~dev28-3.7 is installed OR openstack-magnum-api-7.1.1~dev28-3.7 is installed OR openstack-magnum-conductor-7.1.1~dev28-3.7 is installed OR openstack-manila-7.3.1~dev3-4.7 is installed OR openstack-manila-api-7.3.1~dev3-4.7 is installed OR openstack-manila-data-7.3.1~dev3-4.7 is installed OR openstack-manila-scheduler-7.3.1~dev3-4.7 is installed OR openstack-manila-share-7.3.1~dev3-4.7 is installed OR openstack-monasca-notification-1.14.2~dev1-6.7 is installed OR openstack-monasca-persister-1.12.1~dev9-9 is installed OR openstack-monasca-persister-java-1.12.1~dev9-9 is installed OR openstack-neutron-13.0.5~dev22-3.7 is installed OR openstack-neutron-dhcp-agent-13.0.5~dev22-3.7 is installed OR openstack-neutron-gbp-5.0.1~dev459-3.7 is installed OR openstack-neutron-ha-tool-13.0.5~dev22-3.7 is installed OR openstack-neutron-l3-agent-13.0.5~dev22-3.7 is installed OR openstack-neutron-lbaas-13.0.1~dev14-3.7 is installed OR openstack-neutron-lbaas-agent-13.0.1~dev14-3.7 is installed OR openstack-neutron-linuxbridge-agent-13.0.5~dev22-3.7 is installed OR openstack-neutron-macvtap-agent-13.0.5~dev22-3.7 is installed OR openstack-neutron-metadata-agent-13.0.5~dev22-3.7 is installed OR openstack-neutron-metering-agent-13.0.5~dev22-3.7 is installed OR openstack-neutron-openvswitch-agent-13.0.5~dev22-3.7 is installed OR openstack-neutron-server-13.0.5~dev22-3.7 is installed OR openstack-nova-18.2.2~dev9-3.7 is installed OR openstack-nova-api-18.2.2~dev9-3.7 is installed OR openstack-nova-cells-18.2.2~dev9-3.7 is installed OR openstack-nova-compute-18.2.2~dev9-3.7 is installed OR openstack-nova-conductor-18.2.2~dev9-3.7 is installed OR openstack-nova-console-18.2.2~dev9-3.7 is installed OR openstack-nova-novncproxy-18.2.2~dev9-3.7 is installed OR openstack-nova-placement-api-18.2.2~dev9-3.7 is installed OR openstack-nova-scheduler-18.2.2~dev9-3.7 is installed OR openstack-nova-serialproxy-18.2.2~dev9-3.7 is installed OR openstack-nova-vncproxy-18.2.2~dev9-3.7 is installed OR openstack-octavia-3.1.2~dev8-3.7 is installed OR openstack-octavia-amphora-agent-3.1.2~dev8-3.7 is installed OR openstack-octavia-api-3.1.2~dev8-3.7 is installed OR openstack-octavia-health-manager-3.1.2~dev8-3.7 is installed OR openstack-octavia-housekeeping-3.1.2~dev8-3.7 is installed OR openstack-octavia-worker-3.1.2~dev8-3.7 is installed OR openstack-tempest-19.0.0-12 is installed OR openstack-tempest-test-19.0.0-12 is installed OR python-ceilometer-11.0.2~dev14-3.7 is installed OR python-cinder-13.0.7~dev3-3.7 is installed OR python-cinder-tempest-plugin-0.1.0-8 is installed OR python-designate-7.0.1~dev21-3.7 is installed OR python-heat-11.0.3~dev19-3.7 is installed OR python-horizon-plugin-neutron-fwaas-ui-1.5.1~dev6-8 is installed OR python-horizon-plugin-neutron-lbaas-ui-5.0.1~dev7-8 is installed OR python-horizon-plugin-neutron-vpnaas-ui-1.4.1~dev7-8 is installed OR python-ironic-11.1.4~dev9-3.7 is installed OR python-ironicclient-2.5.3-4.7 is installed OR python-ironicclient-doc-2.5.3-4.7 is installed OR python-keystone-14.1.1~dev8-3.7 is installed OR python-keystonemiddleware-5.2.0-8 is installed OR python-magnum-7.1.1~dev28-3.7 is installed OR python-manila-7.3.1~dev3-4.7 is installed OR python-monasca-notification-1.14.2~dev1-6.7 is installed OR python-monasca-persister-1.12.1~dev9-9 is installed OR python-monasca-tempest-plugin-0.3.0-8 is installed OR python-neutron-13.0.5~dev22-3.7 is installed OR python-neutron-gbp-5.0.1~dev459-3.7 is installed OR python-neutron-lbaas-13.0.1~dev14-3.7 is installed OR python-nova-18.2.2~dev9-3.7 is installed OR python-octavia-3.1.2~dev8-3.7 is installed OR python-openstackclient-3.16.2-8 is installed OR python-openstacksdk-0.17.3-8 is installed OR python-proliantutils-2.8.4-8 is installed OR python-tempest-19.0.0-12 is installed OR python-vmware-nsx-13.0.1~dev146-9 is installed OR python-vmware-nsxlib-13.0.1~dev24-8 is installed OR yast2-crowbar-3.4.2-8 is installed
BACK