Oval Definition:	oval:org.opensuse.security:def:56552
Revision Date: 2020-12-01 Version: 1 Title: Security update for libofx (Important) Description: This update for libofx fixes the following issues: Security issues fixed: - CVE-2017-2816: Fix an exploitable buffer overflow vulnerability in the tag parsing functionality (bsc#1058673). - CVE-2017-2920: Fix a buffer overflow vulnerability in sanitize_proprietary_tags in lib/ofx_preproc.cpp (bsc#1061964). - CVE-2017-14731: Fix remote denial of service via a crafted file in ofx_proc_file in ofx_preproc.cpp (bsc#1060437). Family: unix Class: patch Status: Reference(s): 1012382 1024908 1034113 1043485 1055962 1058673 1060437 1061964 1068032 1073311 1080157 1080533 1082632 1087231 1087659 1087906 1090338 1092548 1093158 1094268 1096740 1096748 1100152 1103186 1106913 1109772 1111331 1112178 1113399 1116841 1118338 1119019 1122822 1124832 1125580 1129279 1131416 1131427 1131587 1132673 1132828 1133188 1139073 1141035 1154043 1155988 1176421 827568 920160 962052 968849 976340 989121 989122 993302 993313 CVE-2010-1163 CVE-2010-1172 CVE-2010-1646 CVE-2011-0010 CVE-2012-2337 CVE-2013-0292 CVE-2013-1775 CVE-2013-1776 CVE-2013-2217 CVE-2014-3634 CVE-2014-9687 CVE-2015-8946 CVE-2016-0686 CVE-2016-0687 CVE-2016-0695 CVE-2016-1572 CVE-2016-2098 CVE-2016-3425 CVE-2016-3427 CVE-2016-6224 CVE-2016-6316 CVE-2016-6317 CVE-2016-8636 CVE-2017-14731 CVE-2017-17741 CVE-2017-18174 CVE-2017-2816 CVE-2017-2920 CVE-2018-1091 CVE-2018-1120 CVE-2018-1128 CVE-2018-1129 CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2018-19407 CVE-2018-3665 CVE-2018-5150 CVE-2018-5154 CVE-2018-5155 CVE-2018-5157 CVE-2018-5158 CVE-2018-5159 CVE-2018-5168 CVE-2018-5174 CVE-2018-5178 CVE-2018-5183 CVE-2019-11091 CVE-2019-11135 CVE-2019-11139 CVE-2019-11486 CVE-2019-3882 CVE-2019-8564 CVE-2019-9503 CVE-2020-15169 SUSE-SU-2016:0241-1 SUSE-SU-2016:1250-1 SUSE-SU-2016:2704-1 SUSE-SU-2017:2716-1 SUSE-SU-2018:0336-1 SUSE-SU-2018:1334-1 SUSE-SU-2018:2064-1 SUSE-SU-2018:2103-1 SUSE-SU-2019:1287-1 SUSE-SU-2019:1296-1 SUSE-SU-2019:2959-1 SUSE-SU-2020:2686-1 Platform(s): openSUSE Leap 15.0 openSUSE Leap 15.1 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 6-LTSS SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND libXtst6-1.2.3-lp150.1 is installed Definition Synopsis openSUSE Leap 15.1 is installed AND Package Information elfutils-0.168-lp151.4.3 is installed OR elfutils-lang-0.168-lp151.4.3 is installed OR libasm-devel-0.168-lp151.4.3 is installed OR libasm1-0.168-lp151.4.3 is installed OR libasm1-32bit-0.168-lp151.4.3 is installed OR libdw-devel-0.168-lp151.4.3 is installed OR libdw1-0.168-lp151.4.3 is installed OR libdw1-32bit-0.168-lp151.4.3 is installed OR libebl-devel-0.168-lp151.4.3 is installed OR libebl-plugins-0.168-lp151.4.3 is installed OR libebl-plugins-32bit-0.168-lp151.4.3 is installed OR libelf-devel-0.168-lp151.4.3 is installed OR libelf-devel-32bit-0.168-lp151.4.3 is installed OR libelf1-0.168-lp151.4.3 is installed OR libelf1-32bit-0.168-lp151.4.3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information libofx-0.9.9-3.7 is installed OR libofx6-0.9.9-3.7 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND sudo-1.8.10p3-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kgraft-patch-3_12_74-60_64_63-default-7-2 is installed OR kgraft-patch-3_12_74-60_64_63-xen-7-2 is installed OR kgraft-patch-SLE12-SP1_Update_22-7-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information dbus-1-glib-0.100.2-3 is installed OR dbus-1-glib-32bit-0.100.2-3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information MozillaFirefox-60.4.0esr-109.55 is installed OR MozillaFirefox-devel-60.4.0esr-109.55 is installed OR MozillaFirefox-translations-common-60.4.0esr-109.55 is installed OR libfreebl3-3.40.1-58.18 is installed OR libfreebl3-32bit-3.40.1-58.18 is installed OR libsoftokn3-3.40.1-58.18 is installed OR libsoftokn3-32bit-3.40.1-58.18 is installed OR mozilla-nspr-4.20-19.6 is installed OR mozilla-nspr-32bit-4.20-19.6 is installed OR mozilla-nss-3.40.1-58.18 is installed OR mozilla-nss-32bit-3.40.1-58.18 is installed OR mozilla-nss-certs-3.40.1-58.18 is installed OR mozilla-nss-certs-32bit-3.40.1-58.18 is installed OR mozilla-nss-sysinit-3.40.1-58.18 is installed OR mozilla-nss-sysinit-32bit-3.40.1-58.18 is installed OR mozilla-nss-tools-3.40.1-58.18 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information kgraft-patch-4_4_103-92_56-default-11-2 is installed OR kgraft-patch-SLE12-SP2_Update_17-11-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information res-signingkeys-3.0.37-52.23 is installed OR smt-3.0.37-52.23 is installed OR smt-support-3.0.37-52.23 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information krb5-1.12.5-39 is installed OR krb5-32bit-1.12.5-39 is installed OR krb5-client-1.12.5-39 is installed OR krb5-doc-1.12.5-39 is installed OR krb5-plugin-kdb-ldap-1.12.5-39 is installed OR krb5-plugin-preauth-otp-1.12.5-39 is installed OR krb5-plugin-preauth-pkinit-1.12.5-39 is installed OR krb5-server-1.12.5-39 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-BCL is installed AND squid-3.5.21-26.17 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information MozillaFirefox-60.9.0-109.86 is installed OR MozillaFirefox-translations-common-60.9.0-109.86 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information libpython3_4m1_0-3.4.10-25.39 is installed OR python3-3.4.10-25.39 is installed OR python3-base-3.4.10-25.39 is installed OR python3-curses-3.4.10-25.39 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND SuSEfirewall2-3.6.312.333-3.13 is installed Definition Synopsis SUSE OpenStack Cloud 6 is installed AND python-suds-jurko-0.6-4 is installed Definition Synopsis SUSE OpenStack Cloud 6-LTSS is installed AND Package Information ruby2.1-rubygem-actionview-4_2-4.2.9-9.12 is installed OR rubygem-actionview-4_2-4.2.9-9.12 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND Package Information MozillaFirefox-52.8.0esr-109.31 is installed OR MozillaFirefox-devel-52.8.0esr-109.31 is installed OR MozillaFirefox-translations-52.8.0esr-109.31 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND Package Information python-PyYAML-5.1.2-26.9 is installed OR python-asn1crypto-0.24.0-2.5 is installed OR python-botocore-1.12.213-28.12 is installed OR python-jsonpatch-1.1-10.4 is installed OR python-jsonpointer-1.0-10.3 is installed OR python-packaging-17.1-2.5 is installed OR python3-PyYAML-5.1.2-26.9 is installed OR python3-asn1crypto-0.24.0-2.5 is installed OR python3-jsonpointer-1.0-10.3 is installed OR python3-packaging-17.1-2.5 is installed
BACK