Oval Definition:oval:org.opensuse.security:def:56435
Revision Date:2020-12-01Version:1
Title:Security update for libplist (Moderate)
Description:

This update for libplist fixes the following issues:

Security issues fixed:

- CVE-2017-6439: Heap-based buffer overflow in the parse_string_node function. (bsc#1029638) - CVE-2017-6438: Heap-based buffer overflow in the parse_unicode_node function. (bsc#1029706) - CVE-2017-6437: The base64encode function in base64.c allows local users to cause denial of service (out-of-bounds read) via a crafted plist file. (bsc#1029707) - CVE-2017-6436: Integer overflow in parse_string_node. (bsc#1029751) - CVE-2017-6435: Crafted plist file could lead to Heap-buffer overflow. (bsc#1029639)

Family:unixClass:patch
Status:Reference(s):1022263
1022264
1022265
1022283
1022284
1022553
1024328
1029638
1029639
1029706
1029707
1029751
1030406
1032322
1056993
1085276
1088268
1090036
1102682
1103203
1105323
1122839
1131239
1131241
974449
974614
974618
975069
975070
998182
CVE-2009-3235
CVE-2011-3372
CVE-2013-4143
CVE-2014-3634
CVE-2014-5461
CVE-2014-7819
CVE-2014-9654
CVE-2016-10166
CVE-2016-10167
CVE-2016-10168
CVE-2016-3622
CVE-2016-3623
CVE-2016-3945
CVE-2016-3990
CVE-2016-3991
CVE-2016-6906
CVE-2016-6912
CVE-2016-7404
CVE-2016-9317
CVE-2017-0861
CVE-2017-6362
CVE-2017-6435
CVE-2017-6436
CVE-2017-6437
CVE-2017-6438
CVE-2017-6439
CVE-2017-7214
CVE-2017-7400
CVE-2018-1000199
CVE-2018-10902
CVE-2018-17199
CVE-2018-5390
CVE-2018-7750
CVE-2019-0217
CVE-2019-0220
SUSE-SU-2016:2508-1
SUSE-SU-2017:0468-1
SUSE-SU-2017:1233-1
SUSE-SU-2017:1443-1
SUSE-SU-2017:2201-1
SUSE-SU-2018:0135-1
SUSE-SU-2018:0873-1
SUSE-SU-2018:1232-1
SUSE-SU-2018:2960-1
SUSE-SU-2019:0888-1
Platform(s):openSUSE Leap 15.0
openSUSE Leap 15.1
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP1-LTSS
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP2-BCL
SUSE Linux Enterprise Server 12 SP2-ESPOS
SUSE Linux Enterprise Server 12 SP2-LTSS
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 12 SP4
SUSE OpenStack Cloud 6
SUSE OpenStack Cloud 7
SUSE OpenStack Cloud 8
SUSE OpenStack Cloud Crowbar 8
Product(s):
Definition Synopsis
  • openSUSE Leap 15.0 is installed
  • AND Package Information
  • apache2-2.4.33-lp150.1 is installed
  • OR apache2-doc-2.4.33-lp150.1 is installed
  • OR apache2-example-pages-2.4.33-lp150.1 is installed
  • OR apache2-prefork-2.4.33-lp150.1 is installed
  • OR apache2-utils-2.4.33-lp150.1 is installed
    • Definition Synopsis
  • openSUSE Leap 15.1 is installed
  • AND Package Information
  • libopenssl-1_1-devel-1.1.0i-lp151.8.3 is installed
  • OR libopenssl-1_1-devel-32bit-1.1.0i-lp151.8.3 is installed
  • OR libopenssl1_1-1.1.0i-lp151.8.3 is installed
  • OR libopenssl1_1-32bit-1.1.0i-lp151.8.3 is installed
  • OR libopenssl1_1-hmac-1.1.0i-lp151.8.3 is installed
  • OR libopenssl1_1-hmac-32bit-1.1.0i-lp151.8.3 is installed
  • OR openssl-1_1-1.1.0i-lp151.8.3 is installed
  • OR openssl-1_1-doc-1.1.0i-lp151.8.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • AND Package Information
  • libplist-1.12-20.3 is installed
  • OR libplist++3-1.12-20.3 is installed
  • OR libplist3-1.12-20.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1 is installed
  • AND Package Information
  • libicu-doc-52.1-7 is installed
  • OR libicu52_1-52.1-7 is installed
  • OR libicu52_1-32bit-52.1-7 is installed
  • OR libicu52_1-data-52.1-7 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1-LTSS is installed
  • AND Package Information
  • kgraft-patch-3_12_74-60_64_96-default-4-2 is installed
  • OR kgraft-patch-3_12_74-60_64_96-xen-4-2 is installed
  • OR kgraft-patch-SLE12-SP1_Update_29-4-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2 is installed
  • AND Package Information
  • liblua5_2-5.2.2-4 is installed
  • OR liblua5_2-32bit-5.2.2-4 is installed
  • OR lua-5.2.2-4 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-BCL is installed
  • AND Package Information
  • ghostscript-9.26-23.16 is installed
  • OR ghostscript-x11-9.26-23.16 is installed
  • OR libspectre-0.2.7-12.4 is installed
  • OR libspectre1-0.2.7-12.4 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
  • AND Package Information
  • kernel-default-4.4.121-92.85 is installed
  • OR kernel-default-base-4.4.121-92.85 is installed
  • OR kernel-default-devel-4.4.121-92.85 is installed
  • OR kernel-devel-4.4.121-92.85 is installed
  • OR kernel-macros-4.4.121-92.85 is installed
  • OR kernel-source-4.4.121-92.85 is installed
  • OR kernel-syms-4.4.121-92.85 is installed
  • OR kgraft-patch-4_4_121-92_85-default-1-3.5 is installed
  • OR kgraft-patch-SLE12-SP2_Update_23-1-3.5 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-LTSS is installed
  • AND Package Information
  • kgraft-patch-4_4_90-92_45-default-8-2 is installed
  • OR kgraft-patch-SLE12-SP2_Update_14-8-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND Package Information
  • emacs-24.3-19 is installed
  • OR emacs-el-24.3-19 is installed
  • OR emacs-info-24.3-19 is installed
  • OR emacs-nox-24.3-19 is installed
  • OR emacs-x11-24.3-19 is installed
  • OR etags-24.3-19 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-LTSS is installed
  • AND Package Information
  • curl-7.37.0-37.43 is installed
  • OR libcurl4-7.37.0-37.43 is installed
  • OR libcurl4-32bit-7.37.0-37.43 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
  • AND Package Information
  • java-1_7_0-openjdk-1.7.0.201-43.18 is installed
  • OR java-1_7_0-openjdk-demo-1.7.0.201-43.18 is installed
  • OR java-1_7_0-openjdk-devel-1.7.0.201-43.18 is installed
  • OR java-1_7_0-openjdk-headless-1.7.0.201-43.18 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND Package Information
  • gnome-keyring-3.20.0-28.3 is installed
  • OR gnome-keyring-32bit-3.20.0-28.3 is installed
  • OR gnome-keyring-lang-3.20.0-28.3 is installed
  • OR gnome-keyring-pam-3.20.0-28.3 is installed
  • OR gnome-keyring-pam-32bit-3.20.0-28.3 is installed
  • OR libgck-modules-gnome-keyring-3.20.0-28.3 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud 6 is installed
  • AND ruby2.1-rubygem-sprockets-2_11-2.11.3-1 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud 7 is installed
  • AND Package Information
  • openstack-magnum-3.1.2~a0~dev20-9 is installed
  • OR openstack-magnum-api-3.1.2~a0~dev20-9 is installed
  • OR openstack-magnum-conductor-3.1.2~a0~dev20-9 is installed
  • OR openstack-magnum-doc-3.1.2~a0~dev20-9 is installed
  • OR python-magnum-3.1.2~a0~dev20-9 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud 8 is installed
  • AND Package Information
  • kernel-default-4.4.180-94.107 is installed
  • OR kernel-default-base-4.4.180-94.107 is installed
  • OR kernel-default-devel-4.4.180-94.107 is installed
  • OR kernel-default-kgraft-4.4.180-94.107 is installed
  • OR kernel-devel-4.4.180-94.107 is installed
  • OR kernel-macros-4.4.180-94.107 is installed
  • OR kernel-source-4.4.180-94.107 is installed
  • OR kernel-syms-4.4.180-94.107 is installed
  • OR kgraft-patch-4_4_180-94_107-default-1-4.3 is installed
  • OR kgraft-patch-SLE12-SP3_Update_29-1-4.3 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud Crowbar 8 is installed
  • AND ucode-intel-20200602-13.68 is installed
    • BACK