| Revision Date: | 2020-12-01 | Version: | 1 |
| Title: | Security update for libofx (Important) |
| Description: |
This update for libofx fixes the following issues:
Security issues fixed:
- CVE-2017-2816: Fix an exploitable buffer overflow vulnerability in the tag parsing functionality (bsc#1058673). - CVE-2017-2920: Fix a buffer overflow vulnerability in sanitize_proprietary_tags in lib/ofx_preproc.cpp (bsc#1061964). - CVE-2017-14731: Fix remote denial of service via a crafted file in ofx_proc_file in ofx_preproc.cpp (bsc#1060437).
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | 1012382
1024908
1034113
1043485
1055962
1058673
1060437
1061964
1068032
1073311
1080157
1080533
1082632
1087231
1087659
1087906
1090338
1092548
1093158
1094268
1096740
1096748
1100152
1103186
1106913
1109772
1111331
1112178
1113399
1116841
1118338
1119019
1122822
1124832
1125580
1129279
1131416
1131427
1131587
1132673
1132828
1133188
1139073
1141035
1154043
1155988
1176421
827568
920160
962052
968849
976340
989121
989122
993302
993313
CVE-2010-1163
CVE-2010-1172
CVE-2010-1646
CVE-2011-0010
CVE-2012-2337
CVE-2013-0292
CVE-2013-1775
CVE-2013-1776
CVE-2013-2217
CVE-2014-3634
CVE-2014-9687
CVE-2015-8946
CVE-2016-0686
CVE-2016-0687
CVE-2016-0695
CVE-2016-1572
CVE-2016-2098
CVE-2016-3425
CVE-2016-3427
CVE-2016-6224
CVE-2016-6316
CVE-2016-6317
CVE-2016-8636
CVE-2017-14731
CVE-2017-17741
CVE-2017-18174
CVE-2017-2816
CVE-2017-2920
CVE-2018-1091
CVE-2018-1120
CVE-2018-1128
CVE-2018-1129
CVE-2018-12126
CVE-2018-12127
CVE-2018-12130
CVE-2018-19407
CVE-2018-3665
CVE-2018-5150
CVE-2018-5154
CVE-2018-5155
CVE-2018-5157
CVE-2018-5158
CVE-2018-5159
CVE-2018-5168
CVE-2018-5174
CVE-2018-5178
CVE-2018-5183
CVE-2019-11091
CVE-2019-11135
CVE-2019-11139
CVE-2019-11486
CVE-2019-3882
CVE-2019-8564
CVE-2019-9503
CVE-2020-15169
SUSE-SU-2016:0241-1
SUSE-SU-2016:1250-1
SUSE-SU-2016:2704-1
SUSE-SU-2017:2716-1
SUSE-SU-2018:0336-1
SUSE-SU-2018:1334-1
SUSE-SU-2018:2064-1
SUSE-SU-2018:2103-1
SUSE-SU-2019:1287-1
SUSE-SU-2019:1296-1
SUSE-SU-2019:2959-1
SUSE-SU-2020:2686-1
|
| Platform(s): | openSUSE Leap 15.0
openSUSE Leap 15.1
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP1-LTSS
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP2-BCL
SUSE Linux Enterprise Server 12 SP2-ESPOS
SUSE Linux Enterprise Server 12 SP2-LTSS
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-BCL
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 12 SP4
SUSE OpenStack Cloud 6
SUSE OpenStack Cloud 6-LTSS
SUSE OpenStack Cloud 7
SUSE OpenStack Cloud 8
| Product(s): | |
| Definition Synopsis |
| openSUSE Leap 15.0 is installed AND libXtst6-1.2.3-lp150.1 is installed
|
| Definition Synopsis |
| openSUSE Leap 15.1 is installed
AND Package Information
elfutils-0.168-lp151.4.3 is installed
OR elfutils-lang-0.168-lp151.4.3 is installed
OR libasm-devel-0.168-lp151.4.3 is installed
OR libasm1-0.168-lp151.4.3 is installed
OR libasm1-32bit-0.168-lp151.4.3 is installed
OR libdw-devel-0.168-lp151.4.3 is installed
OR libdw1-0.168-lp151.4.3 is installed
OR libdw1-32bit-0.168-lp151.4.3 is installed
OR libebl-devel-0.168-lp151.4.3 is installed
OR libebl-plugins-0.168-lp151.4.3 is installed
OR libebl-plugins-32bit-0.168-lp151.4.3 is installed
OR libelf-devel-0.168-lp151.4.3 is installed
OR libelf-devel-32bit-0.168-lp151.4.3 is installed
OR libelf1-0.168-lp151.4.3 is installed
OR libelf1-32bit-0.168-lp151.4.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP3 is installed
AND Package Information
libofx-0.9.9-3.7 is installed
OR libofx6-0.9.9-3.7 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP1 is installed
AND sudo-1.8.10p3-1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP1-LTSS is installed
AND Package Information
kgraft-patch-3_12_74-60_64_63-default-7-2 is installed
OR kgraft-patch-3_12_74-60_64_63-xen-7-2 is installed
OR kgraft-patch-SLE12-SP1_Update_22-7-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2 is installed
AND Package Information
dbus-1-glib-0.100.2-3 is installed
OR dbus-1-glib-32bit-0.100.2-3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-BCL is installed
AND Package Information
MozillaFirefox-60.4.0esr-109.55 is installed
OR MozillaFirefox-devel-60.4.0esr-109.55 is installed
OR MozillaFirefox-translations-common-60.4.0esr-109.55 is installed
OR libfreebl3-3.40.1-58.18 is installed
OR libfreebl3-32bit-3.40.1-58.18 is installed
OR libsoftokn3-3.40.1-58.18 is installed
OR libsoftokn3-32bit-3.40.1-58.18 is installed
OR mozilla-nspr-4.20-19.6 is installed
OR mozilla-nspr-32bit-4.20-19.6 is installed
OR mozilla-nss-3.40.1-58.18 is installed
OR mozilla-nss-32bit-3.40.1-58.18 is installed
OR mozilla-nss-certs-3.40.1-58.18 is installed
OR mozilla-nss-certs-32bit-3.40.1-58.18 is installed
OR mozilla-nss-sysinit-3.40.1-58.18 is installed
OR mozilla-nss-sysinit-32bit-3.40.1-58.18 is installed
OR mozilla-nss-tools-3.40.1-58.18 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
AND Package Information
kgraft-patch-4_4_103-92_56-default-11-2 is installed
OR kgraft-patch-SLE12-SP2_Update_17-11-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-LTSS is installed
AND Package Information
res-signingkeys-3.0.37-52.23 is installed
OR smt-3.0.37-52.23 is installed
OR smt-support-3.0.37-52.23 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3 is installed
AND Package Information
krb5-1.12.5-39 is installed
OR krb5-32bit-1.12.5-39 is installed
OR krb5-client-1.12.5-39 is installed
OR krb5-doc-1.12.5-39 is installed
OR krb5-plugin-kdb-ldap-1.12.5-39 is installed
OR krb5-plugin-preauth-otp-1.12.5-39 is installed
OR krb5-plugin-preauth-pkinit-1.12.5-39 is installed
OR krb5-server-1.12.5-39 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-BCL is installed
AND squid-3.5.21-26.17 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-LTSS is installed
AND Package Information
MozillaFirefox-60.9.0-109.86 is installed
OR MozillaFirefox-translations-common-60.9.0-109.86 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
AND Package Information
libpython3_4m1_0-3.4.10-25.39 is installed
OR python3-3.4.10-25.39 is installed
OR python3-base-3.4.10-25.39 is installed
OR python3-curses-3.4.10-25.39 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP4 is installed
AND SuSEfirewall2-3.6.312.333-3.13 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 6 is installed
AND python-suds-jurko-0.6-4 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 6-LTSS is installed
AND Package Information
ruby2.1-rubygem-actionview-4_2-4.2.9-9.12 is installed
OR rubygem-actionview-4_2-4.2.9-9.12 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 7 is installed
AND Package Information
MozillaFirefox-52.8.0esr-109.31 is installed
OR MozillaFirefox-devel-52.8.0esr-109.31 is installed
OR MozillaFirefox-translations-52.8.0esr-109.31 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 8 is installed
AND Package Information
python-PyYAML-5.1.2-26.9 is installed
OR python-asn1crypto-0.24.0-2.5 is installed
OR python-botocore-1.12.213-28.12 is installed
OR python-jsonpatch-1.1-10.4 is installed
OR python-jsonpointer-1.0-10.3 is installed
OR python-packaging-17.1-2.5 is installed
OR python3-PyYAML-5.1.2-26.9 is installed
OR python3-asn1crypto-0.24.0-2.5 is installed
OR python3-jsonpointer-1.0-10.3 is installed
OR python3-packaging-17.1-2.5 is installed
|