Oval Definition:	oval:org.opensuse.security:def:56051
Revision Date: 2021-08-05 Version: 1 Title: Security update for libsndfile (Critical) Description: This update for libsndfile fixes the following issues: - CVE-2018-13139: Fixed a stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact. (bsc#1100167) - CVE-2018-19432: Fixed a NULL pointer dereference in the function sf_write_int in sndfile.c, which will lead to a denial of service. (bsc#1116993) - CVE-2021-3246: Fixed a heap buffer overflow vulnerability in msadpcm_decode_block. (bsc#1188540) - CVE-2018-19758: Fixed a heap-based buffer over-read at wav.c in wav_write_header in libsndfile 1.0.28 that will cause a denial of service. (bsc#1117954) Family: unix Class: patch Status: Reference(s): 1003077 1008842 1009682 1010829 1012620 1012985 1013659 1013678 1013680 1015703 1015787 1015821 1017512 1018100 1018128 1018263 1018419 1018446 1019168 1019514 1020048 1020795 1021256 1021374 1021762 1021913 1022559 1022971 1023164 1023207 1023377 1023762 1023824 1023888 1023992 1024081 1024234 1024309 1024508 1024788 1025039 1025235 1025354 1025802 1026024 1026722 1026914 1027066 1027178 1027189 1027190 1027974 1028041 1028415 1028595 1028648 1028895 1029470 1029850 1029986 1030118 1030213 1030263 1030593 1030901 1031003 1031052 1031080 1031440 1031567 1031579 1031662 1031842 1032114 1032120 1032125 1032141 1032344 1032345 1033336 1034173 1034670 103470 1034700 1035576 1035699 1035738 1035877 1036453 1036752 1038261 1038337 1038564 1042892 1043398 1050751 1086825 1092098 1100167 1103098 1111331 1116993 1117954 1124729 1124734 1128378 1143194 1143273 1170603 1170771 1188540 799133 831120 833251 834601 847135 848014 853048 853049 856832 856836 857926 858311 859068 859158 860092 860163 860165 860300 860302 861256 863297 914939 917630 922853 930399 931620 937444 940946 954270 954470 954763 968697 970083 971933 979215 982783 983212 984530 985561 988065 989056 993832 CVE-2006-2607 CVE-2009-0793 CVE-2010-0424 CVE-2013-2212 CVE-2013-4073 CVE-2013-4238 CVE-2013-4276 CVE-2013-4549 CVE-2013-6400 CVE-2013-6885 CVE-2014-1642 CVE-2014-1666 CVE-2014-1891 CVE-2014-1892 CVE-2014-1893 CVE-2014-1894 CVE-2014-1895 CVE-2014-1896 CVE-2014-1950 CVE-2015-1350 CVE-2015-2695 CVE-2016-10044 CVE-2016-10200 CVE-2016-10208 CVE-2016-10220 CVE-2016-2117 CVE-2016-3070 CVE-2016-5243 CVE-2016-7117 CVE-2016-9191 CVE-2016-9445 CVE-2016-9446 CVE-2016-9588 CVE-2016-9601 CVE-2016-9604 CVE-2016-9809 CVE-2016-9812 CVE-2016-9813 CVE-2017-2647 CVE-2017-2671 CVE-2017-5669 CVE-2017-5897 CVE-2017-5951 CVE-2017-5986 CVE-2017-6074 CVE-2017-6214 CVE-2017-6345 CVE-2017-6346 CVE-2017-6348 CVE-2017-6353 CVE-2017-6951 CVE-2017-7187 CVE-2017-7207 CVE-2017-7261 CVE-2017-7294 CVE-2017-7308 CVE-2017-7507 CVE-2017-7533 CVE-2017-7616 CVE-2017-7645 CVE-2017-7869 CVE-2017-8106 CVE-2017-8291 CVE-2017-8890 CVE-2017-9242 CVE-2018-1000301 CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2018-13139 CVE-2018-19432 CVE-2018-19758 CVE-2018-5391 CVE-2019-11091 CVE-2019-13057 CVE-2019-13565 CVE-2019-6974 CVE-2019-7221 CVE-2019-9213 CVE-2020-12243 CVE-2020-12268 CVE-2021-3246 SUSE-SU-2015:2294-1 SUSE-SU-2016:3297-1 SUSE-SU-2017:1360-1 SUSE-SU-2017:1404-1 SUSE-SU-2017:1838-1 SUSE-SU-2017:2089-1 SUSE-SU-2019:1235-1 SUSE-SU-2020:1210-1 SUSE-SU-2020:1212-1 Platform(s): openSUSE Leap 15.0 openSUSE Leap 15.1 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP2-LTSS-SAP SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND Package Information augeas-1.10.1-lp150.1 is installed OR augeas-lenses-1.10.1-lp150.1 is installed OR libaugeas0-1.10.1-lp150.1 is installed Definition Synopsis openSUSE Leap 15.1 is installed AND Package Information kernel-debug-4.12.14-lp151.28.4 is installed OR kernel-debug-base-4.12.14-lp151.28.4 is installed OR kernel-debug-devel-4.12.14-lp151.28.4 is installed OR kernel-default-4.12.14-lp151.28.4 is installed OR kernel-default-base-4.12.14-lp151.28.4 is installed OR kernel-default-devel-4.12.14-lp151.28.4 is installed OR kernel-devel-4.12.14-lp151.28.4 is installed OR kernel-docs-4.12.14-lp151.28.4 is installed OR kernel-docs-html-4.12.14-lp151.28.4 is installed OR kernel-kvmsmall-4.12.14-lp151.28.4 is installed OR kernel-kvmsmall-base-4.12.14-lp151.28.4 is installed OR kernel-kvmsmall-devel-4.12.14-lp151.28.4 is installed OR kernel-macros-4.12.14-lp151.28.4 is installed OR kernel-obs-build-4.12.14-lp151.28.4 is installed OR kernel-obs-qa-4.12.14-lp151.28.4 is installed OR kernel-source-4.12.14-lp151.28.4 is installed OR kernel-source-vanilla-4.12.14-lp151.28.4 is installed OR kernel-syms-4.12.14-lp151.28.4 is installed OR kernel-vanilla-4.12.14-lp151.28.4 is installed OR kernel-vanilla-base-4.12.14-lp151.28.4 is installed OR kernel-vanilla-devel-4.12.14-lp151.28.4 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information libQtWebKit4-4.6.3-5.29 is installed OR libQtWebKit4-32bit-4.6.3-5.29 is installed OR libqt4-4.6.3-5.29 is installed OR libqt4-32bit-4.6.3-5.29 is installed OR libqt4-qt3support-4.6.3-5.29 is installed OR libqt4-qt3support-32bit-4.6.3-5.29 is installed OR libqt4-sql-4.6.3-5.29 is installed OR libqt4-sql-32bit-4.6.3-5.29 is installed OR libqt4-sql-mysql-4.6.3-5.29 is installed OR libqt4-sql-mysql-32bit-4.6.3-5.29 is installed OR libqt4-sql-postgresql-4.6.3-5.29 is installed OR libqt4-sql-postgresql-32bit-4.6.3-5.29 is installed OR libqt4-sql-sqlite-4.6.3-5.29 is installed OR libqt4-sql-sqlite-32bit-4.6.3-5.29 is installed OR libqt4-sql-unixODBC-4.6.3-5.29 is installed OR libqt4-sql-unixODBC-32bit-4.6.3-5.29 is installed OR libqt4-x11-4.6.3-5.29 is installed OR libqt4-x11-32bit-4.6.3-5.29 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information krb5-1.6.3-133.49.103 is installed OR krb5-32bit-1.6.3-133.49.103 is installed OR krb5-client-1.6.3-133.49.103 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information ghostscript-9.15-22 is installed OR ghostscript-x11-9.15-22 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information gnutls-3.2.15-18.3 is installed OR libgnutls28-3.2.15-18.3 is installed OR libgnutls28-32bit-3.2.15-18.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information cron-4.2-58 is installed OR cronie-1.4.11-58 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kgraft-patch-3_12_74-60_64_48-default-2-2 is installed OR kgraft-patch-3_12_74-60_64_48-xen-2-2 is installed OR kgraft-patch-SLE12-SP1_Update_17-2-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information java-1_8_0-openjdk-1.8.0.101-14 is installed OR java-1_8_0-openjdk-demo-1.8.0.101-14 is installed OR java-1_8_0-openjdk-devel-1.8.0.101-14 is installed OR java-1_8_0-openjdk-headless-1.8.0.101-14 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information MozillaFirefox-60.8.0-109.83 is installed OR MozillaFirefox-devel-60.8.0-109.83 is installed OR MozillaFirefox-translations-common-60.8.0-109.83 is installed OR libfreebl3-3.44.1-58.28 is installed OR libfreebl3-32bit-3.44.1-58.28 is installed OR libfreebl3-hmac-3.44.1-58.28 is installed OR libfreebl3-hmac-32bit-3.44.1-58.28 is installed OR libsoftokn3-3.44.1-58.28 is installed OR libsoftokn3-32bit-3.44.1-58.28 is installed OR libsoftokn3-hmac-3.44.1-58.28 is installed OR libsoftokn3-hmac-32bit-3.44.1-58.28 is installed OR mozilla-nss-3.44.1-58.28 is installed OR mozilla-nss-32bit-3.44.1-58.28 is installed OR mozilla-nss-certs-3.44.1-58.28 is installed OR mozilla-nss-certs-32bit-3.44.1-58.28 is installed OR mozilla-nss-sysinit-3.44.1-58.28 is installed OR mozilla-nss-sysinit-32bit-3.44.1-58.28 is installed OR mozilla-nss-tools-3.44.1-58.28 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information java-1_7_1-ibm-1.7.1_sr4.30-38.26 is installed OR java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26 is installed OR java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26 is installed OR java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26 is installed OR java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information kgraft-patch-4_4_103-92_53-default-6-2 is installed OR kgraft-patch-SLE12-SP2_Update_16-6-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information cron-4.2-58 is installed OR cronie-1.4.11-58 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND Package Information kernel-default-4.4.180-94.121 is installed OR kernel-default-base-4.4.180-94.121 is installed OR kernel-default-devel-4.4.180-94.121 is installed OR kernel-default-kgraft-4.4.180-94.121 is installed OR kernel-devel-4.4.180-94.121 is installed OR kernel-macros-4.4.180-94.121 is installed OR kernel-source-4.4.180-94.121 is installed OR kernel-syms-4.4.180-94.121 is installed OR kgraft-patch-4_4_180-94_121-default-1-4.5 is installed OR kgraft-patch-SLE12-SP3_Update_32-1-4.5 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information ImageMagick-6.8.8.1-71.85 is installed OR libMagickCore-6_Q16-1-6.8.8.1-71.85 is installed OR libMagickWand-6_Q16-1-6.8.8.1-71.85 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND gzip-1.6-9.3 is installed Definition Synopsis SUSE OpenStack Cloud 6 is installed AND Package Information curl-7.37.0-37.23 is installed OR libcurl4-7.37.0-37.23 is installed OR libcurl4-32bit-7.37.0-37.23 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND Package Information libsnmp30-5.7.3-6.3 is installed OR libsnmp30-32bit-5.7.3-6.3 is installed OR net-snmp-5.7.3-6.3 is installed OR perl-SNMP-5.7.3-6.3 is installed OR snmp-mibs-5.7.3-6.3 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND clamav-0.100.3-33.29 is installed
BACK