Oval Definition:	oval:org.opensuse.security:def:56325
Revision Date: 2020-12-01 Version: 1 Title: Security update for netpbm (Moderate) Description: This update for netpbm fixes the following issues: Security bugs: * CVE-2017-2586: A NULL pointer dereference in stringToUint function could lead to a denial of service (abort) problem when processing malformed images. [bsc#1024292] * CVE-2017-2581: A out-of-bounds write in writeRasterPbm() could be used by attackers to crash the decoder or potentially execute code. [bsc#1024287] * CVE-2017-2587: A insufficient size check of memory allocation in createCanvas() function could be used for a denial of service attack (memory exhaustion) [bsc#1024294] Family: unix Class: patch Status: Reference(s): 1005591 1024287 1024292 1024294 1035905 1038564 1042892 1050751 1074293 1081741 1104668 1140868 934119 952474 CVE-2008-4225 CVE-2008-4226 CVE-2008-4409 CVE-2009-0696 CVE-2009-0793 CVE-2009-1885 CVE-2009-4022 CVE-2010-3613 CVE-2010-3614 CVE-2010-3615 CVE-2010-4494 CVE-2011-0414 CVE-2011-1907 CVE-2011-1910 CVE-2011-1944 CVE-2011-2464 CVE-2011-4313 CVE-2012-1667 CVE-2012-2141 CVE-2012-3817 CVE-2012-3868 CVE-2012-4244 CVE-2012-5134 CVE-2012-5166 CVE-2012-5688 CVE-2012-5689 CVE-2013-0338 CVE-2013-1969 CVE-2013-1985 CVE-2013-2266 CVE-2013-4276 CVE-2013-4854 CVE-2013-7447 CVE-2014-0191 CVE-2014-0591 CVE-2014-2284 CVE-2014-2285 CVE-2014-3230 CVE-2014-3565 CVE-2014-3660 CVE-2014-8500 CVE-2015-0252 CVE-2015-1349 CVE-2015-1819 CVE-2015-1852 CVE-2015-4620 CVE-2015-5312 CVE-2015-5477 CVE-2015-5621 CVE-2015-5722 CVE-2015-7497 CVE-2015-7498 CVE-2015-7499 CVE-2015-7500 CVE-2015-7941 CVE-2015-7942 CVE-2015-7995 CVE-2015-8035 CVE-2015-8241 CVE-2015-8242 CVE-2015-8317 CVE-2015-8710 CVE-2015-9019 CVE-2016-0705 CVE-2016-0729 CVE-2016-1762 CVE-2016-1833 CVE-2016-1834 CVE-2016-1835 CVE-2016-1836 CVE-2016-1837 CVE-2016-1838 CVE-2016-1839 CVE-2016-1840 CVE-2016-2099 CVE-2016-3627 CVE-2016-3705 CVE-2016-4463 CVE-2016-4483 CVE-2016-4738 CVE-2016-6855 CVE-2017-2581 CVE-2017-2586 CVE-2017-2587 CVE-2017-3732 CVE-2017-3736 CVE-2017-5029 CVE-2017-7533 CVE-2017-8890 CVE-2017-9242 CVE-2018-1000001 CVE-2018-1050 CVE-2018-12539 CVE-2018-1517 CVE-2018-1656 CVE-2018-2940 CVE-2018-2952 CVE-2018-2964 CVE-2018-2973 CVE-2019-11709 CVE-2019-11711 CVE-2019-11712 CVE-2019-11713 CVE-2019-11715 CVE-2019-11717 CVE-2019-11719 CVE-2019-11729 CVE-2019-11730 CVE-2019-9811 SUSE-SU-2017:1313-1 SUSE-SU-2017:1603-1 SUSE-SU-2017:2090-1 SUSE-SU-2018:0071-1 SUSE-SU-2018:0832-1 SUSE-SU-2018:2839-1 SUSE-SU-2019:1861-1 Platform(s): openSUSE Leap 15.0 openSUSE Leap 15.1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND Package Information apparmor-abstractions-2.12-lp150.5 is installed OR apparmor-docs-2.12-lp150.5 is installed OR apparmor-parser-2.12-lp150.5 is installed OR apparmor-parser-lang-2.12-lp150.5 is installed OR apparmor-profiles-2.12-lp150.5 is installed OR apparmor-utils-2.12-lp150.5 is installed OR apparmor-utils-lang-2.12-lp150.5 is installed OR perl-apparmor-2.12-lp150.5 is installed OR python3-apparmor-2.12-lp150.5 is installed Definition Synopsis openSUSE Leap 15.1 is installed AND Package Information irssi-1.1.3-33 is installed OR irssi-devel-1.1.3-33 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information libnetpbm11-10.66.3-7 is installed OR libnetpbm11-32bit-10.66.3-7 is installed OR netpbm-10.66.3-7 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information bind-9.9.6P1-30 is installed OR bind-chrootenv-9.9.6P1-30 is installed OR bind-doc-9.9.6P1-30 is installed OR bind-libs-9.9.6P1-30 is installed OR bind-libs-32bit-9.9.6P1-30 is installed OR bind-utils-9.9.6P1-30 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kgraft-patch-3_12_74-60_64_45-default-3-2 is installed OR kgraft-patch-3_12_74-60_64_45-xen-3-2 is installed OR kgraft-patch-SLE12-SP1_Update_16-3-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information eog-3.20.4-7 is installed OR eog-lang-3.20.4-7 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information libmysqlclient18-10.0.35-29.20 is installed OR libmysqlclient18-32bit-10.0.35-29.20 is installed OR mariadb-10.0.35-29.20 is installed OR mariadb-client-10.0.35-29.20 is installed OR mariadb-errormessages-10.0.35-29.20 is installed OR mariadb-tools-10.0.35-29.20 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information kgraft-patch-4_4_121-92_80-default-7-2 is installed OR kgraft-patch-SLE12-SP2_Update_22-7-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information kernel-firmware-20170530-21.22 is installed OR ucode-amd-20170530-21.22 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND squid-3.5.21-25 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information kgraft-patch-4_4_156-94_64-default-7-2 is installed OR kgraft-patch-SLE12-SP3_Update_20-7-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information perl-Mail-SpamAssassin-3.4.2-44.3 is installed OR spamassassin-3.4.2-44.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information cracklib-2.9.0-7 is installed OR libcrack2-2.9.0-7 is installed OR libcrack2-32bit-2.9.0-7 is installed Definition Synopsis SUSE OpenStack Cloud 6 is installed AND python-keystonemiddleware-2.3.1-1 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND Package Information gnutls-3.2.15-18.6 is installed OR libgnutls-openssl27-3.2.15-18.6 is installed OR libgnutls28-3.2.15-18.6 is installed OR libgnutls28-32bit-3.2.15-18.6 is installed Definition Synopsis SUSE OpenStack Cloud 9 is installed AND python-ecdsa-0.13.3-5.10 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND Package Information libssh2-1-1.4.3-20.9 is installed OR libssh2-1-32bit-1.4.3-20.9 is installed OR libssh2_org-1.4.3-20.9 is installed
BACK