Oval Definition:oval:org.opensuse.security:def:56295
Revision Date:2020-12-01Version:1
Title:Security update for apparmor (Moderate)
Description:



This update for apparmor provides the following fixes:

This security issue was fixed:

- CVE-2017-6507: Preserve unknown profiles when reloading apparmor.service (bsc#1029696)

These non-security issues were fixed:

- Add tunables/kernelvars abstraction. (bsc#1031529) - Update flags of ntpd profile. (bsc#1022610) - Force AppArmor to start after /var/lib mounts. (bsc#1016259) - Update mlmmj profiles. (bsc#1000201)
Family:unixClass:patch
Status:Reference(s):1000201
1016259
1017646
1022610
1027519
1029696
1031529
1034560
1042146
1055047
1056336
1057974
1061075
1061081
1061086
1063123
1068187
1068191
1068588
1071224
1071311
1075801
1077925
1097108
1099306
1111331
1130680
958791
960341
964225
CVE-2009-1885
CVE-2011-1521
CVE-2011-3177
CVE-2011-3389
CVE-2011-4944
CVE-2012-0845
CVE-2012-1150
CVE-2012-3386
CVE-2012-4502
CVE-2012-4503
CVE-2013-1752
CVE-2013-1753
CVE-2013-1991
CVE-2013-2000
CVE-2013-4238
CVE-2014-0021
CVE-2014-1912
CVE-2014-3970
CVE-2014-4650
CVE-2014-5461
CVE-2014-7185
CVE-2015-0252
CVE-2015-7554
CVE-2015-8540
CVE-2015-8781
CVE-2015-8782
CVE-2015-8783
CVE-2016-0772
CVE-2016-1000110
CVE-2016-10087
CVE-2016-1567
CVE-2016-5636
CVE-2016-5699
CVE-2017-1000368
CVE-2017-13672
CVE-2017-15289
CVE-2017-15592
CVE-2017-15595
CVE-2017-15597
CVE-2017-18078
CVE-2017-6507
CVE-2018-10853
CVE-2018-12126
CVE-2018-12127
CVE-2018-12130
CVE-2018-20815
CVE-2018-3646
CVE-2019-11091
SUSE-SU-2016:0353-1
SUSE-SU-2017:0860-1
SUSE-SU-2017:1151-1
SUSE-SU-2017:1627-1
SUSE-SU-2017:3236-1
SUSE-SU-2018:0546-1
SUSE-SU-2018:2359-1
SUSE-SU-2019:1349-1
Platform(s):openSUSE Leap 15.0
openSUSE Leap 15.1
SUSE Linux Enterprise Desktop 11 SP4
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP1-LTSS
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP2-BCL
SUSE Linux Enterprise Server 12 SP2-ESPOS
SUSE Linux Enterprise Server 12 SP2-LTSS
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 12 SP4
SUSE OpenStack Cloud 6
SUSE OpenStack Cloud 7
SUSE OpenStack Cloud 8
SUSE OpenStack Cloud Crowbar 9
Product(s):
Definition Synopsis
  • openSUSE Leap 15.0 is installed
  • AND less-530-lp150.1 is installed
  • Definition Synopsis
  • openSUSE Leap 15.1 is installed
  • AND Package Information
  • cron-4.2-lp151.4.3 is installed
  • OR cronie-1.5.1-lp151.4.3 is installed
  • OR cronie-anacron-1.5.1-lp151.4.3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP4 is installed
  • AND Package Information
  • libtiff3-3.8.2-141.163 is installed
  • OR libtiff3-32bit-3.8.2-141.163 is installed
  • OR tiff-3.8.2-141.163 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP2 is installed
  • AND Package Information
  • apparmor-2.8.2-54 is installed
  • OR apparmor-docs-2.8.2-54 is installed
  • OR apparmor-parser-2.8.2-54 is installed
  • OR apparmor-profiles-2.8.2-54 is installed
  • OR apparmor-utils-2.8.2-54 is installed
  • OR libapparmor1-2.8.2-54 is installed
  • OR libapparmor1-32bit-2.8.2-54 is installed
  • OR pam_apparmor-2.8.2-54 is installed
  • OR pam_apparmor-32bit-2.8.2-54 is installed
  • OR perl-apparmor-2.8.2-54 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1 is installed
  • AND Package Information
  • gv-3.7.4-1 is installed
  • OR wdiff-1.2.1-3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1-LTSS is installed
  • AND sudo-1.8.10p3-2.16 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2 is installed
  • AND chrony-2.3-3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-BCL is installed
  • AND Package Information
  • res-signingkeys-3.0.37-52.23 is installed
  • OR smt-3.0.37-52.23 is installed
  • OR smt-support-3.0.37-52.23 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
  • AND Package Information
  • java-1_8_0-openjdk-1.8.0.181-27.26 is installed
  • OR java-1_8_0-openjdk-demo-1.8.0.181-27.26 is installed
  • OR java-1_8_0-openjdk-devel-1.8.0.181-27.26 is installed
  • OR java-1_8_0-openjdk-headless-1.8.0.181-27.26 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-LTSS is installed
  • AND Package Information
  • kgraft-patch-4_4_74-92_35-default-10-2 is installed
  • OR kgraft-patch-SLE12-SP2_Update_12-10-2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND powerpc-utils-1.3.3-5 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-LTSS is installed
  • AND Package Information
  • bzip2-1.0.6-30.8 is installed
  • OR bzip2-doc-1.0.6-30.8 is installed
  • OR libbz2-1-1.0.6-30.8 is installed
  • OR libbz2-1-32bit-1.0.6-30.8 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
  • AND Package Information
  • libecpg6-10.8-1.9 is installed
  • OR libpq5-10.8-1.9 is installed
  • OR libpq5-32bit-10.8-1.9 is installed
  • OR postgresql10-10.8-1.9 is installed
  • OR postgresql10-contrib-10.8-1.9 is installed
  • OR postgresql10-docs-10.8-1.9 is installed
  • OR postgresql10-libs-10.8-1.9 is installed
  • OR postgresql10-server-10.8-1.9 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND Package Information
  • apache-commons-beanutils-1.9.2-1 is installed
  • OR apache-commons-beanutils-javadoc-1.9.2-1 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud 6 is installed
  • AND Package Information
  • xen-4.5.5_20-22.36 is installed
  • OR xen-doc-html-4.5.5_20-22.36 is installed
  • OR xen-kmp-default-4.5.5_20_k3.12.74_60.64.63-22.36 is installed
  • OR xen-libs-4.5.5_20-22.36 is installed
  • OR xen-libs-32bit-4.5.5_20-22.36 is installed
  • OR xen-tools-4.5.5_20-22.36 is installed
  • OR xen-tools-domU-4.5.5_20-22.36 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud 7 is installed
  • AND Package Information
  • ntp-4.2.8p11-64.5 is installed
  • OR ntp-doc-4.2.8p11-64.5 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud 8 is installed
  • AND Package Information
  • ardana-cinder-8.0+git.1579279939.ee7da88-3.39 is installed
  • OR ardana-cobbler-8.0+git.1575037115.0326803-3.41 is installed
  • OR ardana-designate-8.0+git.1573597788.15b7984-3.17 is installed
  • OR ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3 is installed
  • OR ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6 is installed
  • OR ardana-glance-8.0+git.1571846045.ab9e3ea-3.20 is installed
  • OR ardana-heat-8.0+git.1571777596.14dce6a-3.15 is installed
  • OR ardana-input-model-8.0+git.1582147997.b9ed134-3.36 is installed
  • OR ardana-ironic-8.0+git.1571845225.006843d-3.9 is installed
  • OR ardana-keystone-8.0+git.1573147067.09e3ea0-3.27 is installed
  • OR ardana-logging-8.0+git.1572452293.e65d714-3.21 is installed
  • OR ardana-monasca-8.0+git.1572527728.9b34bdf-3.21 is installed
  • OR ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12 is installed
  • OR ardana-mq-8.0+git.1581024906.fbf0be3-3.16 is installed
  • OR ardana-neutron-8.0+git.1573050365.ff6fa06-3.36 is installed
  • OR ardana-nova-8.0+git.1571846125.584d988-3.38 is installed
  • OR ardana-octavia-8.0+git.1575642049.1f321d0-3.23 is installed
  • OR ardana-osconfig-8.0+git.1581015942.2d21e63-3.42 is installed
  • OR ardana-tempest-8.0+git.1579261264.7dd213a-3.30 is installed
  • OR keepalived-2.0.19-3.6 is installed
  • OR mariadb-10.2.31-4.17 is installed
  • OR mariadb-client-10.2.31-4.17 is installed
  • OR mariadb-errormessages-10.2.31-4.17 is installed
  • OR mariadb-galera-10.2.31-4.17 is installed
  • OR mariadb-tools-10.2.31-4.17 is installed
  • OR openstack-cinder-11.2.3~dev23-3.24 is installed
  • OR openstack-cinder-api-11.2.3~dev23-3.24 is installed
  • OR openstack-cinder-backup-11.2.3~dev23-3.24 is installed
  • OR openstack-cinder-doc-11.2.3~dev23-3.24 is installed
  • OR openstack-cinder-scheduler-11.2.3~dev23-3.24 is installed
  • OR openstack-cinder-volume-11.2.3~dev23-3.24 is installed
  • OR openstack-dashboard-12.0.5~dev2-3.23 is installed
  • OR openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14 is installed
  • OR openstack-heat-9.0.8~dev22-3.27 is installed
  • OR openstack-heat-api-9.0.8~dev22-3.27 is installed
  • OR openstack-heat-api-cfn-9.0.8~dev22-3.27 is installed
  • OR openstack-heat-api-cloudwatch-9.0.8~dev22-3.27 is installed
  • OR openstack-heat-doc-9.0.8~dev22-3.27 is installed
  • OR openstack-heat-engine-9.0.8~dev22-3.27 is installed
  • OR openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27 is installed
  • OR openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12 is installed
  • OR openstack-heat-test-9.0.8~dev22-3.27 is installed
  • OR openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9 is installed
  • OR openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14 is installed
  • OR openstack-ironic-9.1.8~dev8-3.24 is installed
  • OR openstack-ironic-api-9.1.8~dev8-3.24 is installed
  • OR openstack-ironic-conductor-9.1.8~dev8-3.24 is installed
  • OR openstack-ironic-doc-9.1.8~dev8-3.24 is installed
  • OR openstack-keystone-12.0.4~dev5-5.30 is installed
  • OR openstack-keystone-doc-12.0.4~dev5-5.30 is installed
  • OR openstack-monasca-agent-2.2.5~dev5-3.15 is installed
  • OR openstack-neutron-11.0.9~dev60-3.27 is installed
  • OR openstack-neutron-dhcp-agent-11.0.9~dev60-3.27 is installed
  • OR openstack-neutron-doc-11.0.9~dev60-3.27 is installed
  • OR openstack-neutron-gbp-7.3.1~dev72-3.12 is installed
  • OR openstack-neutron-ha-tool-11.0.9~dev60-3.27 is installed
  • OR openstack-neutron-l3-agent-11.0.9~dev60-3.27 is installed
  • OR openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27 is installed
  • OR openstack-neutron-macvtap-agent-11.0.9~dev60-3.27 is installed
  • OR openstack-neutron-metadata-agent-11.0.9~dev60-3.27 is installed
  • OR openstack-neutron-metering-agent-11.0.9~dev60-3.27 is installed
  • OR openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27 is installed
  • OR openstack-neutron-server-11.0.9~dev60-3.27 is installed
  • OR openstack-neutron-vsphere-2.0.1~dev133-3.12 is installed
  • OR openstack-neutron-vsphere-doc-2.0.1~dev133-3.12 is installed
  • OR openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12 is installed
  • OR openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12 is installed
  • OR openstack-nova-16.1.9~dev49-3.32 is installed
  • OR openstack-nova-api-16.1.9~dev49-3.32 is installed
  • OR openstack-nova-cells-16.1.9~dev49-3.32 is installed
  • OR openstack-nova-compute-16.1.9~dev49-3.32 is installed
  • OR openstack-nova-conductor-16.1.9~dev49-3.32 is installed
  • OR openstack-nova-console-16.1.9~dev49-3.32 is installed
  • OR openstack-nova-consoleauth-16.1.9~dev49-3.32 is installed
  • OR openstack-nova-doc-16.1.9~dev49-3.32 is installed
  • OR openstack-nova-novncproxy-16.1.9~dev49-3.32 is installed
  • OR openstack-nova-placement-api-16.1.9~dev49-3.32 is installed
  • OR openstack-nova-scheduler-16.1.9~dev49-3.32 is installed
  • OR openstack-nova-serialproxy-16.1.9~dev49-3.32 is installed
  • OR openstack-nova-vncproxy-16.1.9~dev49-3.32 is installed
  • OR openstack-octavia-1.0.6~dev3-4.21 is installed
  • OR openstack-octavia-amphora-agent-1.0.6~dev3-4.21 is installed
  • OR openstack-octavia-amphora-image-0.1.2-3.9 is installed
  • OR openstack-octavia-amphora-image-x86_64-0.1.2-3.9 is installed
  • OR openstack-octavia-api-1.0.6~dev3-4.21 is installed
  • OR openstack-octavia-health-manager-1.0.6~dev3-4.21 is installed
  • OR openstack-octavia-housekeeping-1.0.6~dev3-4.21 is installed
  • OR openstack-octavia-worker-1.0.6~dev3-4.21 is installed
  • OR openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3 is installed
  • OR openstack-sahara-7.0.5~dev4-3.12 is installed
  • OR openstack-sahara-api-7.0.5~dev4-3.12 is installed
  • OR openstack-sahara-doc-7.0.5~dev4-3.12 is installed
  • OR openstack-sahara-engine-7.0.5~dev4-3.12 is installed
  • OR openstack-trove-8.0.2~dev2-3.12 is installed
  • OR openstack-trove-api-8.0.2~dev2-3.12 is installed
  • OR openstack-trove-conductor-8.0.2~dev2-3.12 is installed
  • OR openstack-trove-doc-8.0.2~dev2-3.12 is installed
  • OR openstack-trove-guestagent-8.0.2~dev2-3.12 is installed
  • OR openstack-trove-taskmanager-8.0.2~dev2-3.12 is installed
  • OR python-cinder-11.2.3~dev23-3.24 is installed
  • OR python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9 is installed
  • OR python-congressclient-1.8.1-3.3 is installed
  • OR python-designateclient-2.7.1-3.3 is installed
  • OR python-designateclient-doc-2.7.1-3.3 is installed
  • OR python-freezegun-0.3.9-1.3 is installed
  • OR python-heat-9.0.8~dev22-3.27 is installed
  • OR python-horizon-12.0.5~dev2-3.23 is installed
  • OR python-horizon-plugin-designate-ui-5.0.3~dev2-3.9 is installed
  • OR python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14 is installed
  • OR python-ironic-9.1.8~dev8-3.24 is installed
  • OR python-ironic-lib-2.10.2-3.3 is installed
  • OR python-keystone-12.0.4~dev5-5.30 is installed
  • OR python-monasca-agent-2.2.5~dev5-3.15 is installed
  • OR python-networking-cisco-6.1.1~dev65-3.3 is installed
  • OR python-networking-vsphere-2.0.1~dev133-3.12 is installed
  • OR python-neutron-11.0.9~dev60-3.27 is installed
  • OR python-neutron-gbp-7.3.1~dev72-3.12 is installed
  • OR python-nova-16.1.9~dev49-3.32 is installed
  • OR python-octavia-1.0.6~dev3-4.21 is installed
  • OR python-osc-lib-1.7.1-3.3 is installed
  • OR python-oslo.context-2.17.2-3.3 is installed
  • OR python-oslo.rootwrap-5.9.3-3.3 is installed
  • OR python-oslo.serialization-2.20.3-3.3 is installed
  • OR python-oslo.service-1.25.2-3.3 is installed
  • OR python-sahara-7.0.5~dev4-3.12 is installed
  • OR python-stevedore-1.25.2-3.3 is installed
  • OR python-taskflow-2.14.2-3.3 is installed
  • OR python-trove-8.0.2~dev2-3.12 is installed
  • OR venv-openstack-aodh-5.1.1~dev7-12.22 is installed
  • OR venv-openstack-aodh-x86_64-5.1.1~dev7-12.22 is installed
  • OR venv-openstack-barbican-5.0.2~dev3-12.23 is installed
  • OR venv-openstack-barbican-x86_64-5.0.2~dev3-12.23 is installed
  • OR venv-openstack-ceilometer-9.0.8~dev7-12.20 is installed
  • OR venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20 is installed
  • OR venv-openstack-cinder-11.2.3~dev23-14.23 is installed
  • OR venv-openstack-cinder-x86_64-11.2.3~dev23-14.23 is installed
  • OR venv-openstack-designate-5.0.3~dev7-12.21 is installed
  • OR venv-openstack-designate-x86_64-5.0.3~dev7-12.21 is installed
  • OR venv-openstack-freezer-5.0.0.0~xrc2~dev2-10.18 is installed
  • OR venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18 is installed
  • OR venv-openstack-glance-15.0.3~dev3-12.21 is installed
  • OR venv-openstack-glance-x86_64-15.0.3~dev3-12.21 is installed
  • OR venv-openstack-heat-9.0.8~dev22-12.23 is installed
  • OR venv-openstack-heat-x86_64-9.0.8~dev22-12.23 is installed
  • OR venv-openstack-horizon-12.0.5~dev2-14.28 is installed
  • OR venv-openstack-horizon-x86_64-12.0.5~dev2-14.28 is installed
  • OR venv-openstack-ironic-9.1.8~dev8-12.23 is installed
  • OR venv-openstack-ironic-x86_64-9.1.8~dev8-12.23 is installed
  • OR venv-openstack-keystone-12.0.4~dev5-11.24 is installed
  • OR venv-openstack-keystone-x86_64-12.0.4~dev5-11.24 is installed
  • OR venv-openstack-magnum-5.0.2_5.0.2_5.0.2~dev31-11.22 is installed
  • OR venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22 is installed
  • OR venv-openstack-manila-5.1.1~dev2-12.25 is installed
  • OR venv-openstack-manila-x86_64-5.1.1~dev2-12.25 is installed
  • OR venv-openstack-monasca-2.2.2~dev1-11.20 is installed
  • OR venv-openstack-monasca-ceilometer-1.5.1_1.5.1_1.5.1~dev3-8.18 is installed
  • OR venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18 is installed
  • OR venv-openstack-monasca-x86_64-2.2.2~dev1-11.20 is installed
  • OR venv-openstack-murano-4.0.2~dev2-12.18 is installed
  • OR venv-openstack-murano-x86_64-4.0.2~dev2-12.18 is installed
  • OR venv-openstack-neutron-11.0.9~dev60-13.26 is installed
  • OR venv-openstack-neutron-x86_64-11.0.9~dev60-13.26 is installed
  • OR venv-openstack-nova-16.1.9~dev49-11.24 is installed
  • OR venv-openstack-nova-x86_64-16.1.9~dev49-11.24 is installed
  • OR venv-openstack-octavia-1.0.6~dev3-12.23 is installed
  • OR venv-openstack-octavia-x86_64-1.0.6~dev3-12.23 is installed
  • OR venv-openstack-sahara-7.0.5~dev4-11.22 is installed
  • OR venv-openstack-sahara-x86_64-7.0.5~dev4-11.22 is installed
  • OR venv-openstack-swift-2.15.2_2.15.2_2.15.2~dev32-11.16 is installed
  • OR venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16 is installed
  • OR venv-openstack-trove-8.0.2~dev2-11.22 is installed
  • OR venv-openstack-trove-x86_64-8.0.2~dev2-11.22 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud Crowbar 9 is installed
  • AND nodejs6-6.17.1-11.30 is installed
  • BACK