Oval Definition:	oval:org.opensuse.security:def:5807
Revision Date: 2021-08-20 Version: 1 Title: Security update for qemu (Moderate) Description: This update for qemu fixes the following issues: Security issues fixed: - usbredir: free call on invalid pointer in bufp_alloc (bsc#1189145, CVE-2021-3682) - NULL pointer dereference in ESP (bsc#1180433, CVE-2020-35504) (bsc#1180434, CVE-2020-35505) (bsc#1180435, CVE-2020-35506) - NULL pointer dereference issue in megasas-gen2 host bus adapter (bsc#1180432, CVE-2020-35503) - eepro100: stack overflow via infinite recursion (bsc#1182651, CVE-2021-20255) - usb: unbounded stack allocation in usbredir (bsc#1186012, CVE-2021-3527) Family: unix Class: patch Status: Reference(s): 1180432 1180433 1180434 1180435 1182651 1186012 1189145 CVE-2008-4989 CVE-2009-0368 CVE-2009-0793 CVE-2009-3627 CVE-2010-4523 CVE-2011-2054 CVE-2011-3602 CVE-2011-3848 CVE-2011-3872 CVE-2011-4128 CVE-2012-0390 CVE-2012-1569 CVE-2012-1573 CVE-2012-3864 CVE-2012-3865 CVE-2012-3866 CVE-2012-3867 CVE-2013-1982 CVE-2013-1985 CVE-2013-3567 CVE-2013-4276 CVE-2013-4761 CVE-2013-4956 CVE-2013-7447 CVE-2014-0092 CVE-2014-0107 CVE-2014-1959 CVE-2014-3248 CVE-2014-3253 CVE-2014-3466 CVE-2014-7202 CVE-2014-7203 CVE-2014-9087 CVE-2014-9721 CVE-2015-0848 CVE-2015-4588 CVE-2015-4695 CVE-2015-4696 CVE-2015-7747 CVE-2016-4574 CVE-2016-4579 CVE-2017-6827 CVE-2017-6828 CVE-2017-6829 CVE-2017-6830 CVE-2017-6831 CVE-2017-6832 CVE-2017-6833 CVE-2017-6834 CVE-2017-6835 CVE-2017-6836 CVE-2017-6837 CVE-2017-6838 CVE-2017-6839 CVE-2020-35503 CVE-2020-35504 CVE-2020-35505 CVE-2020-35506 CVE-2021-20255 CVE-2021-3527 CVE-2021-3682 Platform(s): openSUSE 13.1 openSUSE 13.1 NonFree openSUSE 13.2 SUSE Linux Enterprise Build System Kit 12 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Build System Kit 12 SP2 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise for SAP 12 SUSE Linux Enterprise for SAP 12 SP1 SUSE Linux Enterprise for SAP 12 SP2 SUSE Linux Enterprise High Availability 12 SP2 SUSE Linux Enterprise High Availability 12 SP3 SUSE Linux Enterprise High Availability 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Live Patching 12 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for High Performance Computing 12 SUSE Linux Enterprise Module for Legacy Software 12 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 SUSE Linux Enterprise Module for Web Scripting 12 SUSE Linux Enterprise Real Time Extension 12 SP1 SUSE Linux Enterprise Real Time Extension 12 SP2 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 Product(s): Definition Synopsis SUSE Linux Enterprise Build System Kit 12 is installed AND Package Information flute-1.3.0-4 is installed OR libbase-1.1.3-4 is installed OR libfonts-1.1.3-4 is installed OR libformula-1.1.3-4 is installed OR liblayout-0.2.10-4 is installed OR libloader-1.1.3-3 is installed OR libreoffice-5.0.2.2-13 is installed OR libreoffice-sdk-5.0.2.2-13 is installed OR librepository-1.1.3-4 is installed OR librevenge-0.0.2-4 is installed OR librevenge-devel-0.0.2-4 is installed OR librevenge-generators-0_0-0-0.0.2-4 is installed OR libserializer-1.1.2-4 is installed OR mdds-0.12.1-3 is installed OR mdds-devel-0.12.1-3 is installed OR pentaho-libxml-1.1.3-4 is installed OR pentaho-reporting-flow-engine-0.9.4-4 is installed OR sac-1.3-4 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND Package Information libreoffice-5.1.3.2-22 is installed OR libreoffice-sdk-5.1.3.2-22 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP2 is installed AND kernel-zfcpdump-4.4.59-92.24 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information gnutls-3.2.15-1 is installed OR libgnutls28-3.2.15-1 is installed OR libgnutls28-32bit-3.2.15-1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND opensc-0.13.0-1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information audiofile-0.3.6-10 is installed OR libaudiofile1-0.3.6-10 is installed OR libaudiofile1-32bit-0.3.6-10 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information bind-utils-9.11.2-1 is installed OR libbind9-160-9.11.2-1 is installed OR libdns169-9.11.2-1 is installed OR libirs160-9.11.2-1 is installed OR libisc166-9.11.2-1 is installed OR libisc166-32bit-9.11.2-1 is installed OR libisccc160-9.11.2-1 is installed OR libisccfg160-9.11.2-1 is installed OR liblwres160-9.11.2-1 is installed OR python-bind-9.11.2-1 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 is installed AND Package Information kgraft-patch-3_12_60-52_49-default-2-2.2 is installed OR kgraft-patch-3_12_60-52_49-xen-2-2.2 is installed OR kgraft-patch-SLE12_Update_14-2-2.2 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 SP1 is installed AND unrar-5.0.14-3.1 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 SP2 is installed AND cryptctl-1.2.6-5.3.11 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP2 is installed AND Package Information cluster-md-kmp-default-4.4.21-69 is installed OR cluster-network-kmp-default-4.4.21-69 is installed OR dlm-kmp-default-4.4.21-69 is installed OR gfs2-kmp-default-4.4.21-69 is installed OR ocfs2-kmp-default-4.4.21-69 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP3 is installed AND libpcreposix0-8.39-7 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP4 is installed AND libpcreposix0-8.39-8.3 is installed Definition Synopsis SUSE Linux Enterprise High Performance Computing 12 SP5 is installed AND Package Information alsa-1.0.27.2-15 is installed OR alsa-docs-1.0.27.2-15 is installed OR libasound2-1.0.27.2-15 is installed OR libasound2-32bit-1.0.27.2-15 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 is installed AND Package Information kgraft-patch-3_12_36-38-default-3-2 is installed OR kgraft-patch-3_12_36-38-xen-3-2 is installed OR kgraft-patch-SLE12_Update_2-3-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Containers 12 is installed AND docker-1.6.2-31 is installed Definition Synopsis SUSE Linux Enterprise Module for High Performance Computing 12 is installed AND Package Information libslurm29-16.05.8.1-5 is installed OR perl-slurm-16.05.8.1-5 is installed OR slurm-16.05.8.1-5 is installed OR slurm-auth-none-16.05.8.1-5 is installed OR slurm-devel-16.05.8.1-5 is installed OR slurm-doc-16.05.8.1-5 is installed OR slurm-lua-16.05.8.1-5 is installed OR slurm-munge-16.05.8.1-5 is installed OR slurm-pam_slurm-16.05.8.1-5 is installed OR slurm-plugins-16.05.8.1-5 is installed OR slurm-sched-wiki-16.05.8.1-5 is installed OR slurm-slurmdbd-16.05.8.1-5 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 12 is installed AND Package Information libopenssl0_9_8-0.9.8j-59 is installed OR libopenssl0_9_8-32bit-0.9.8j-59 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 12 is installed AND Package Information apache2-mod_php5-5.5.14-4 is installed OR php5-5.5.14-4 is installed OR php5-bcmath-5.5.14-4 is installed OR php5-bz2-5.5.14-4 is installed OR php5-calendar-5.5.14-4 is installed OR php5-ctype-5.5.14-4 is installed OR php5-curl-5.5.14-4 is installed OR php5-dba-5.5.14-4 is installed OR php5-dom-5.5.14-4 is installed OR php5-enchant-5.5.14-4 is installed OR php5-exif-5.5.14-4 is installed OR php5-fastcgi-5.5.14-4 is installed OR php5-fileinfo-5.5.14-4 is installed OR php5-fpm-5.5.14-4 is installed OR php5-ftp-5.5.14-4 is installed OR php5-gd-5.5.14-4 is installed OR php5-gettext-5.5.14-4 is installed OR php5-gmp-5.5.14-4 is installed OR php5-iconv-5.5.14-4 is installed OR php5-intl-5.5.14-4 is installed OR php5-json-5.5.14-4 is installed OR php5-ldap-5.5.14-4 is installed OR php5-mbstring-5.5.14-4 is installed OR php5-mcrypt-5.5.14-4 is installed OR php5-mysql-5.5.14-4 is installed OR php5-odbc-5.5.14-4 is installed OR php5-openssl-5.5.14-4 is installed OR php5-pcntl-5.5.14-4 is installed OR php5-pdo-5.5.14-4 is installed OR php5-pear-5.5.14-4 is installed OR php5-pgsql-5.5.14-4 is installed OR php5-pspell-5.5.14-4 is installed OR php5-shmop-5.5.14-4 is installed OR php5-snmp-5.5.14-4 is installed OR php5-soap-5.5.14-4 is installed OR php5-sockets-5.5.14-4 is installed OR php5-sqlite-5.5.14-4 is installed OR php5-suhosin-5.5.14-4 is installed OR php5-sysvmsg-5.5.14-4 is installed OR php5-sysvsem-5.5.14-4 is installed OR php5-sysvshm-5.5.14-4 is installed OR php5-tokenizer-5.5.14-4 is installed OR php5-wddx-5.5.14-4 is installed OR php5-xmlreader-5.5.14-4 is installed OR php5-xmlrpc-5.5.14-4 is installed OR php5-xmlwriter-5.5.14-4 is installed OR php5-xsl-5.5.14-4 is installed OR php5-zip-5.5.14-4 is installed OR php5-zlib-5.5.14-4 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP1 is installed AND Package Information kernel-compute-3.12.58-14.1 is installed OR kernel-compute-base-3.12.58-14.1 is installed OR kernel-compute-devel-3.12.58-14.1 is installed OR kernel-compute_debug-3.12.58-14.1 is installed OR kernel-compute_debug-devel-3.12.58-14.1 is installed OR kernel-devel-rt-3.12.58-14.1 is installed OR kernel-rt-3.12.58-14.1 is installed OR kernel-rt-base-3.12.58-14.1 is installed OR kernel-rt-devel-3.12.58-14.1 is installed OR kernel-rt_debug-3.12.58-14.1 is installed OR kernel-rt_debug-devel-3.12.58-14.1 is installed OR kernel-source-rt-3.12.58-14.1 is installed OR kernel-syms-rt-3.12.58-14.1 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP2 is installed AND Package Information cluster-md-kmp-rt-4.4.104-24.1 is installed OR cluster-network-kmp-rt-4.4.104-24.1 is installed OR dlm-kmp-rt-4.4.104-24.1 is installed OR gfs2-kmp-rt-4.4.104-24.1 is installed OR kernel-devel-rt-4.4.104-24.1 is installed OR kernel-rt-4.4.104-24.1 is installed OR kernel-rt-base-4.4.104-24.1 is installed OR kernel-rt-devel-4.4.104-24.1 is installed OR kernel-rt_debug-4.4.104-24.1 is installed OR kernel-rt_debug-devel-4.4.104-24.1 is installed OR kernel-source-rt-4.4.104-24.1 is installed OR kernel-syms-rt-4.4.104-24.1 is installed OR ocfs2-kmp-rt-4.4.104-24.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 is installed AND Package Information pcsc-lite-1.4.102-1.31.1 is installed OR pcsc-lite-32bit-1.4.102-1.31.1 is installed OR pcsc-lite-x86-1.4.102-1.31.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP2 is installed AND MozillaFirefox-17.0.5esr-0.4.1 is installed OR MozillaFirefox-branding-SLED-7-0.6.9.17 is installed OR MozillaFirefox-translations-17.0.5esr-0.4.1 is installed OR libfreebl3-3.14.3-0.4.3.1 is installed OR libfreebl3-32bit-3.14.3-0.4.3.1 is installed OR libfreebl3-x86-3.14.3-0.4.3.1 is installed OR mozilla-nspr-4.9.6-0.3.1 is installed OR mozilla-nspr-32bit-4.9.6-0.3.1 is installed OR mozilla-nspr-x86-4.9.6-0.3.1 is installed OR mozilla-nss-3.14.3-0.4.3.1 is installed OR mozilla-nss-32bit-3.14.3-0.4.3.1 is installed OR mozilla-nss-tools-3.14.3-0.4.3.1 is installed OR mozilla-nss-x86-3.14.3-0.4.3.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP2 is installed AND MozillaFirefox-17.0.5esr-0.4.1 is installed OR MozillaFirefox-branding-SLED-7-0.6.9.17 is installed OR MozillaFirefox-translations-17.0.5esr-0.4.1 is installed OR libfreebl3-3.14.3-0.4.3.1 is installed OR libfreebl3-32bit-3.14.3-0.4.3.1 is installed OR libfreebl3-x86-3.14.3-0.4.3.1 is installed OR mozilla-nspr-4.9.6-0.3.1 is installed OR mozilla-nspr-32bit-4.9.6-0.3.1 is installed OR mozilla-nspr-x86-4.9.6-0.3.1 is installed OR mozilla-nss-3.14.3-0.4.3.1 is installed OR mozilla-nss-32bit-3.14.3-0.4.3.1 is installed OR mozilla-nss-tools-3.14.3-0.4.3.1 is installed OR mozilla-nss-x86-3.14.3-0.4.3.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2 is installed AND NetworkManager-gnome-0.7.1-5.22.28 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP3 is installed AND cups-1.3.9-8.46.52.2 is installed OR cups-client-1.3.9-8.46.52.2 is installed OR cups-libs-1.3.9-8.46.52.2 is installed OR cups-libs-32bit-1.3.9-8.46.52.2 is installed OR cups-libs-x86-1.3.9-8.46.52.2 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP3 is installed AND cups-1.3.9-8.46.52.2 is installed OR cups-client-1.3.9-8.46.52.2 is installed OR cups-libs-1.3.9-8.46.52.2 is installed OR cups-libs-32bit-1.3.9-8.46.52.2 is installed OR cups-libs-x86-1.3.9-8.46.52.2 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3 is installed AND Package Information OpenEXR-1.6.1-83.17.1 is installed OR OpenEXR-32bit-1.6.1-83.17.1 is installed OR OpenEXR-x86-1.6.1-83.17.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3-LTSS is installed AND Package Information java-1_6_0-ibm-1.6.0_sr16.25-69.1 is installed OR java-1_6_0-ibm-alsa-1.6.0_sr16.25-69.1 is installed OR java-1_6_0-ibm-devel-1.6.0_sr16.25-69.1 is installed OR java-1_6_0-ibm-fonts-1.6.0_sr16.25-69.1 is installed OR java-1_6_0-ibm-jdbc-1.6.0_sr16.25-69.1 is installed OR java-1_6_0-ibm-plugin-1.6.0_sr16.25-69.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND Package Information Mesa-9.0.3-0.28.29.2 is installed OR Mesa-32bit-9.0.3-0.28.29.2 is installed OR Mesa-x86-9.0.3-0.28.29.2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND Package Information glibc-2.19-17 is installed OR glibc-32bit-2.19-17 is installed OR glibc-devel-2.19-17 is installed OR glibc-devel-32bit-2.19-17 is installed OR glibc-html-2.19-17 is installed OR glibc-i18ndata-2.19-17 is installed OR glibc-info-2.19-17 is installed OR glibc-locale-2.19-17 is installed OR glibc-locale-32bit-2.19-17 is installed OR glibc-profile-2.19-17 is installed OR glibc-profile-32bit-2.19-17 is installed OR nscd-2.19-17 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information DirectFB-1.7.1-4 is installed OR lib++dfb-1_7-1-1.7.1-4 is installed OR libdirectfb-1_7-1-1.7.1-4 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information MozillaFirefox-45.4.0esr-81 is installed OR MozillaFirefox-translations-45.4.0esr-81 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information libproxy1-0.4.13-16 is installed OR libproxy1-32bit-0.4.13-16 is installed OR libproxy1-config-gnome3-0.4.13-16 is installed OR libproxy1-config-gnome3-32bit-0.4.13-16 is installed OR libproxy1-networkmanager-0.4.13-16 is installed OR libproxy1-pacrunner-webkit-0.4.13-16 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND apache2-mod_perl-2.0.8-11 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed AND Package Information gvim-7.4.326-17.3 is installed OR vim-7.4.326-17.3 is installed OR vim-data-7.4.326-17.3 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed AND Package Information kgraft-patch-4_4_74-92_32-default-10-2 is installed OR kgraft-patch-SLE12-SP2_Update_11-10-2 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND Package Information augeas-0.9.0-3.17.2 is installed OR augeas-devel-0.9.0-3.17.2 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND Package Information Mesa-devel-9.0.3-0.28.29.2 is installed OR Mesa-devel-32bit-9.0.3-0.28.29.2 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND cups-devel-1.7.5-2 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND Package Information DirectFB-devel-1.7.1-4 is installed OR lib++dfb-devel-1.7.1-4 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information ant-1.9.4-1 is installed OR ant-jmf-1.9.4-1 is installed OR ant-scripts-1.9.4-1 is installed OR ant-swing-1.9.4-1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND Package Information libzypp-devel-16.19.0-2.36 is installed OR libzypp-devel-doc-16.19.0-2.36 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND Package Information finch-2.10.9-5 is installed OR libpurple-2.10.9-5 is installed OR libpurple-lang-2.10.9-5 is installed OR libpurple-meanwhile-2.10.9-5 is installed OR libpurple-tcl-2.10.9-5 is installed OR pidgin-2.10.9-5 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND Package Information gcc48-gij-4.8.5-24 is installed OR gcc48-gij-32bit-4.8.5-24 is installed OR libgcj48-4.8.5-24 is installed OR libgcj48-32bit-4.8.5-24 is installed OR libgcj48-jar-4.8.5-24 is installed OR libgcj_bc1-4.8.5-24 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND Package Information freerdp-2.0.0~git.1463131968.4e66df7-11 is installed OR libfreerdp2-2.0.0~git.1463131968.4e66df7-11 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND Package Information NetworkManager-1.0.12-12 is installed OR NetworkManager-lang-1.0.12-12 is installed OR typelib-1_0-NM-1_0-1.0.12-12 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND Package Information freerdp-2.0.0~git.1463131968.4e66df7-12.3 is installed OR libfreerdp2-2.0.0~git.1463131968.4e66df7-12.3 is installed
BACK