Oval Definition:oval:org.opensuse.security:def:58230
Revision Date:2020-12-01Version:1
Title:Security update for libvirt (Moderate)
Description:

This update for libvirt fixes the following issues:

Security issues fixed:

- CVE-2019-3840: Fixed a null pointer dereference vulnerability in virJSONValueObjectHasKey function which could have resulted in a remote denial of service via the guest agent (bsc#1127458).

Other issues fixed:

- libxl: save current memory value after successful balloon (bsc#1120813). - spec: Don't restart libvirt-guests when updating libvirt-client (bsc#1104662).
Family:unixClass:patch
Status:Reference(s):1000396
1001299
1014136
1015348
1015422
1022555
1026236
1027519
1028235
1029128
1029827
1030144
1030442
1044417
1045341
1056248
1056249
1056251
1056427
1068032
1075087
1078677
1080157
1082480
1082481
1082828
1086247
1087082
1087200
1090953
1091041
1091396
1092289
1093215
1094019
1104662
1105010
1109465
1117473
1120813
1123482
1124525
1127458
1129346
1133810
1140868
1145665
1149323
1159548
1163019
1168140
1168142
1169392
1171252
1171254
1172037
1173351
1173998
1174543
1175194
1178666
1178667
1178668
964336
CVE-2016-0634
CVE-2016-7543
CVE-2016-9893
CVE-2016-9895
CVE-2016-9897
CVE-2016-9898
CVE-2016-9899
CVE-2016-9900
CVE-2016-9901
CVE-2016-9902
CVE-2016-9904
CVE-2016-9905
CVE-2017-13765
CVE-2017-13766
CVE-2017-13767
CVE-2017-15130
CVE-2017-15706
CVE-2017-6505
CVE-2017-7228
CVE-2017-9617
CVE-2017-9766
CVE-2018-1304
CVE-2018-1305
CVE-2018-15473
CVE-2018-3639
CVE-2019-11709
CVE-2019-11710
CVE-2019-11711
CVE-2019-11712
CVE-2019-11713
CVE-2019-11714
CVE-2019-11715
CVE-2019-11716
CVE-2019-11717
CVE-2019-11718
CVE-2019-11719
CVE-2019-11720
CVE-2019-11721
CVE-2019-11723
CVE-2019-11724
CVE-2019-11725
CVE-2019-11727
CVE-2019-11728
CVE-2019-11729
CVE-2019-11730
CVE-2019-11733
CVE-2019-11735
CVE-2019-11736
CVE-2019-11738
CVE-2019-11740
CVE-2019-11742
CVE-2019-11743
CVE-2019-11744
CVE-2019-11746
CVE-2019-11747
CVE-2019-11748
CVE-2019-11749
CVE-2019-11750
CVE-2019-11751
CVE-2019-11752
CVE-2019-11753
CVE-2019-16782
CVE-2019-3840
CVE-2019-9636
CVE-2019-9811
CVE-2019-9812
CVE-2020-11739
CVE-2020-11740
CVE-2020-11741
CVE-2020-11742
CVE-2020-12653
CVE-2020-12654
CVE-2020-13753
CVE-2020-14350
CVE-2020-25694
CVE-2020-25695
CVE-2020-25696
CVE-2020-8161
CVE-2020-8184
CVE-2020-8608
CVE-2020-9802
CVE-2020-9803
CVE-2020-9805
CVE-2020-9806
CVE-2020-9807
CVE-2020-9843
CVE-2020-9850
SUSE-SU-2016:3222-1
SUSE-SU-2017:0983-1
SUSE-SU-2017:2555-1
SUSE-SU-2018:0817-1
SUSE-SU-2018:2632-2
SUSE-SU-2019:0553-1
SUSE-SU-2019:0961-1
SUSE-SU-2019:2620-1
SUSE-SU-2020:2069-1
SUSE-SU-2020:2234-1
SUSE-SU-2020:2678-1
SUSE-SU-2020:3477-1
Platform(s):openSUSE Leap 15.0
openSUSE Leap 15.1
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP2-BCL
SUSE Linux Enterprise Server 12 SP2-ESPOS
SUSE Linux Enterprise Server 12 SP2-LTSS
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-BCL
SUSE Linux Enterprise Server 12 SP3-ESPOS
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 12 SP4
SUSE OpenStack Cloud 7
SUSE OpenStack Cloud 8
SUSE OpenStack Cloud Crowbar 8
Product(s):
Definition Synopsis
  • openSUSE Leap 15.0 is installed
  • AND Package Information
  • virtualbox-guest-kmp-default-5.2.10_k4.12.14_lp150.11-lp150.3 is installed
  • OR virtualbox-guest-tools-5.2.10-lp150.3 is installed
  • OR virtualbox-guest-x11-5.2.10-lp150.3 is installed
    • Definition Synopsis
  • openSUSE Leap 15.1 is installed
  • AND Package Information
  • libwireshark9-2.4.15-lp151.2.3 is installed
  • OR libwiretap7-2.4.15-lp151.2.3 is installed
  • OR libwscodecs1-2.4.15-lp151.2.3 is installed
  • OR libwsutil8-2.4.15-lp151.2.3 is installed
  • OR wireshark-2.4.15-lp151.2.3 is installed
  • OR wireshark-devel-2.4.15-lp151.2.3 is installed
  • OR wireshark-ui-qt-2.4.15-lp151.2.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2 is installed
  • AND Package Information
  • MozillaFirefox-45.6.0esr-96 is installed
  • OR MozillaFirefox-translations-45.6.0esr-96 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-BCL is installed
  • AND Package Information
  • dovecot22-2.2.31-19.11 is installed
  • OR dovecot22-backend-mysql-2.2.31-19.11 is installed
  • OR dovecot22-backend-pgsql-2.2.31-19.11 is installed
  • OR dovecot22-backend-sqlite-2.2.31-19.11 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
  • AND Package Information
  • openssh-7.2p2-74.30 is installed
  • OR openssh-askpass-gnome-7.2p2-74.30 is installed
  • OR openssh-fips-7.2p2-74.30 is installed
  • OR openssh-helpers-7.2p2-74.30 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-LTSS is installed
  • AND Package Information
  • MozillaFirefox-68.1.0-109.89 is installed
  • OR MozillaFirefox-branding-SLE-68-32.8 is installed
  • OR MozillaFirefox-devel-68.1.0-109.89 is installed
  • OR MozillaFirefox-translations-common-68.1.0-109.89 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND Package Information
  • libXRes1-1.0.7-3 is installed
  • OR libXRes1-32bit-1.0.7-3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-BCL is installed
  • AND Package Information
  • glib2-2.48.2-12.15 is installed
  • OR glib2-lang-2.48.2-12.15 is installed
  • OR glib2-tools-2.48.2-12.15 is installed
  • OR libgio-2_0-0-2.48.2-12.15 is installed
  • OR libgio-2_0-0-32bit-2.48.2-12.15 is installed
  • OR libglib-2_0-0-2.48.2-12.15 is installed
  • OR libglib-2_0-0-32bit-2.48.2-12.15 is installed
  • OR libgmodule-2_0-0-2.48.2-12.15 is installed
  • OR libgmodule-2_0-0-32bit-2.48.2-12.15 is installed
  • OR libgobject-2_0-0-2.48.2-12.15 is installed
  • OR libgobject-2_0-0-32bit-2.48.2-12.15 is installed
  • OR libgthread-2_0-0-2.48.2-12.15 is installed
  • OR libgthread-2_0-0-32bit-2.48.2-12.15 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-ESPOS is installed
  • AND Package Information
  • libjavascriptcoregtk-4_0-18-2.28.1-2.50 is installed
  • OR libwebkit2gtk-4_0-37-2.28.1-2.50 is installed
  • OR libwebkit2gtk3-lang-2.28.1-2.50 is installed
  • OR typelib-1_0-JavaScriptCore-4_0-2.28.1-2.50 is installed
  • OR typelib-1_0-WebKit2-4_0-2.28.1-2.50 is installed
  • OR webkit2gtk-4_0-injected-bundles-2.28.1-2.50 is installed
  • OR webkit2gtk3-2.28.1-2.50 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-LTSS is installed
  • AND Package Information
  • kgraft-patch-4_4_156-94_64-default-8-2 is installed
  • OR kgraft-patch-SLE12-SP3_Update_20-8-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
  • AND Package Information
  • java-1_8_0-ibm-1.8.0_sr5.30-30.46 is installed
  • OR java-1_8_0-ibm-alsa-1.8.0_sr5.30-30.46 is installed
  • OR java-1_8_0-ibm-plugin-1.8.0_sr5.30-30.46 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND Package Information
  • krb5-appl-clients-1.0.3-1 is installed
  • OR krb5-appl-servers-1.0.3-1 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud 7 is installed
  • AND Package Information
  • libvirt-2.0.0-27.48 is installed
  • OR libvirt-client-2.0.0-27.48 is installed
  • OR libvirt-daemon-2.0.0-27.48 is installed
  • OR libvirt-daemon-config-network-2.0.0-27.48 is installed
  • OR libvirt-daemon-config-nwfilter-2.0.0-27.48 is installed
  • OR libvirt-daemon-driver-interface-2.0.0-27.48 is installed
  • OR libvirt-daemon-driver-libxl-2.0.0-27.48 is installed
  • OR libvirt-daemon-driver-lxc-2.0.0-27.48 is installed
  • OR libvirt-daemon-driver-network-2.0.0-27.48 is installed
  • OR libvirt-daemon-driver-nodedev-2.0.0-27.48 is installed
  • OR libvirt-daemon-driver-nwfilter-2.0.0-27.48 is installed
  • OR libvirt-daemon-driver-qemu-2.0.0-27.48 is installed
  • OR libvirt-daemon-driver-secret-2.0.0-27.48 is installed
  • OR libvirt-daemon-driver-storage-2.0.0-27.48 is installed
  • OR libvirt-daemon-hooks-2.0.0-27.48 is installed
  • OR libvirt-daemon-lxc-2.0.0-27.48 is installed
  • OR libvirt-daemon-qemu-2.0.0-27.48 is installed
  • OR libvirt-daemon-xen-2.0.0-27.48 is installed
  • OR libvirt-doc-2.0.0-27.48 is installed
  • OR libvirt-lock-sanlock-2.0.0-27.48 is installed
  • OR libvirt-nss-2.0.0-27.48 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud 8 is installed
  • AND Package Information
  • bzip2-1.0.6-30.5 is installed
  • OR bzip2-doc-1.0.6-30.5 is installed
  • OR libbz2-1-1.0.6-30.5 is installed
  • OR libbz2-1-32bit-1.0.6-30.5 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud Crowbar 8 is installed
  • AND Package Information
  • ruby2.1-rubygem-loofah-2.0.2-3.8 is installed
  • OR rubygem-loofah-2.0.2-3.8 is installed
    • BACK