Oval Definition:	oval:org.opensuse.security:def:57960
Revision Date: 2021-06-28 Version: 1 Title: Security update for libsolv (Important) Description: This update for libsolv fixes the following issues: Security issues fixed: - CVE-2019-20387: Fixed heap-buffer-overflow in repodata_schema2id (bsc#1161510) - CVE-2021-3200: testcase_read: error out if repos are added or the system is changed too late (bsc#1186229) Other issues fixed: - backport support for blacklisted packages to support ptf packages and retracted patches - fix ruleinfo of complex dependencies returning the wrong origin - fix SOLVER_FLAG_FOCUS_BEST updateing packages without reason - fix add_complex_recommends() selecting conflicted packages in rare cases - fix potential segfault in resolve_jobrules - fix solv_zchunk decoding error if large chunks are used Family: unix Class: patch Status: Reference(s): 1005023 1035204 1065872 1076696 1085130 1085671 1086690 1087059 1090638 1091836 1094150 1094154 1094161 1101591 1107832 1109663 1109847 1110233 1114981 1115518 1119971 1120323 1120943 1138459 1144504 1144902 1145559 1146358 1146359 1149458 1151839 1160770 1161510 1165439 1186229 CVE-2013-4143 CVE-2017-17833 CVE-2017-18269 CVE-2017-5436 CVE-2017-7550 CVE-2018-1000802 CVE-2018-11236 CVE-2018-11237 CVE-2018-14633 CVE-2018-14647 CVE-2018-16864 CVE-2018-16865 CVE-2018-16866 CVE-2018-17182 CVE-2018-20030 CVE-2018-5125 CVE-2018-5127 CVE-2018-5129 CVE-2018-5130 CVE-2018-5131 CVE-2018-5144 CVE-2018-5145 CVE-2018-5146 CVE-2018-5147 CVE-2018-5148 CVE-2019-10160 CVE-2019-10218 CVE-2019-11500 CVE-2019-11500 CVE-2019-12625 CVE-2019-12900 CVE-2019-20387 CVE-2019-8675 CVE-2019-8696 CVE-2019-9278 CVE-2020-1747 CVE-2021-3200 SUSE-SU-2017:1149-1 SUSE-SU-2018:0605-1 SUSE-SU-2018:0850-1 SUSE-SU-2018:1562-1 SUSE-SU-2018:1661-2 SUSE-SU-2018:2991-1 SUSE-SU-2019:0135-1 SUSE-SU-2019:2053-1 SUSE-SU-2019:2454-1 SUSE-SU-2019:2875-1 SUSE-SU-2019:3057-1 SUSE-SU-2019:3066-1 SUSE-SU-2020:0457-1 SUSE-SU-2020:1285-1 Platform(s): openSUSE Leap 15.0 openSUSE Leap 15.1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND Package Information gdk-pixbuf-lang-2.36.11-lp150.3 is installed OR gdk-pixbuf-query-loaders-2.36.11-lp150.3 is installed OR gdk-pixbuf-thumbnailer-2.36.11-lp150.3 is installed OR libgdk_pixbuf-2_0-0-2.36.11-lp150.3 is installed OR typelib-1_0-GdkPixbuf-2_0-2.36.11-lp150.3 is installed Definition Synopsis openSUSE Leap 15.1 is installed AND Package Information qbittorrent-4.1.5-lp151.2.3 is installed OR qbittorrent-nox-4.1.5-lp151.2.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information libpython3_4m1_0-3.4.6-25.29 is installed OR python3-3.4.6-25.29 is installed OR python3-base-3.4.6-25.29 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND xlockmore-5.43-5 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND ucode-intel-20180425-13.20 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information kgraft-patch-4_4_121-92_80-default-6-2 is installed OR kgraft-patch-SLE12-SP2_Update_22-6-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information kgraft-patch-4_4_103-92_56-default-10-2 is installed OR kgraft-patch-SLE12-SP2_Update_17-10-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information java-1_8_0-ibm-1.8.0_sr4.5-29 is installed OR java-1_8_0-ibm-alsa-1.8.0_sr4.5-29 is installed OR java-1_8_0-ibm-plugin-1.8.0_sr4.5-29 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-BCL is installed AND mailman-2.1.17-3.11 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND Package Information libsolv-devel-0.6.37-2.33.1 is installed OR libsolv-tools-0.6.37-2.33.1 is installed OR libzypp-16.21.4-2.51.1 is installed OR libzypp-devel-16.21.4-2.51.1 is installed OR perl-solv-0.6.37-2.33.1 is installed OR python-solv-0.6.37-2.33.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information evince-3.20.2-6.27 is installed OR evince-browser-plugin-3.20.2-6.27 is installed OR evince-lang-3.20.2-6.27 is installed OR evince-plugin-djvudocument-3.20.2-6.27 is installed OR evince-plugin-dvidocument-3.20.2-6.27 is installed OR evince-plugin-pdfdocument-3.20.2-6.27 is installed OR evince-plugin-psdocument-3.20.2-6.27 is installed OR evince-plugin-tiffdocument-3.20.2-6.27 is installed OR evince-plugin-xpsdocument-3.20.2-6.27 is installed OR libevdocument3-4-3.20.2-6.27 is installed OR libevview3-3-3.20.2-6.27 is installed OR nautilus-evince-3.20.2-6.27 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information ghostscript-9.25-23.13 is installed OR ghostscript-x11-9.25-23.13 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information libopenssl1_1-1.1.1-1 is installed OR libopenssl1_1-32bit-1.1.1-1 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND Package Information openslp-2.0.0-18.17 is installed OR openslp-32bit-2.0.0-18.17 is installed OR openslp-server-2.0.0-18.17 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND Package Information libjavascriptcoregtk-4_0-18-2.24.4-2.47 is installed OR libwebkit2gtk-4_0-37-2.24.4-2.47 is installed OR libwebkit2gtk3-lang-2.24.4-2.47 is installed OR typelib-1_0-JavaScriptCore-4_0-2.24.4-2.47 is installed OR typelib-1_0-WebKit2-4_0-2.24.4-2.47 is installed OR webkit2gtk-4_0-injected-bundles-2.24.4-2.47 is installed OR webkit2gtk3-2.24.4-2.47 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND Package Information nfs-client-1.3.0-34.22 is installed OR nfs-doc-1.3.0-34.22 is installed OR nfs-kernel-server-1.3.0-34.22 is installed OR nfs-utils-1.3.0-34.22 is installed
BACK