Oval Definition:	oval:org.opensuse.security:def:60667
Revision Date: 2020-12-01 Version: 1 Title: Security update for haproxy (Important) Description: This update for haproxy fixes the following issues: - CVE-2019-18277: Fixed HTTP smuggling in messages with transfer-encoding header missing the 'chunked' value (bsc#1154980). Family: unix Class: patch Status: Reference(s): 1008539 1010399 1010405 1010406 1010408 1010409 1010421 1010423 1010424 1010425 1010426 1025108 1027282 1034584 1034827 1036494 1041090 1042670 1043008 1047262 1047281 1056134 1064455 1065729 1073269 1073748 1074235 1077355 1078326 1078485 1081750 1083630 1084650 1086001 1087082 1087083 1087813 1089343 1090766 1092611 1097410 1100365 1104134 1120374 1120386 1123371 1123377 1123378 1133147 1137325 1137990 1145929 1146351 1149429 1149496 1149591 1149652 1149792 1152457 1153830 1154118 1154738 1154844 1154980 1155094 1155689 1157155 1157157 1157303 1157804 1158021 1158642 1158819 1159035 1159199 1159285 1159297 1159841 1159908 1159910 1159911 1159912 1160195 1160968 1161586 1162002 1162224 1162227 1162367 1162825 1162928 1162929 1162931 1163508 1163971 1164009 1164051 1164069 1164078 1164846 1164910 1165111 1165311 1165873 1165881 1165894 1165984 1165985 1166844 1167421 1167423 1167629 1168075 1168295 1168424 1168829 1168854 1170011 1170056 1170345 1170411 1170618 1170778 1170847 1171078 1171189 1171191 1171220 1171561 1171732 1171988 1172453 1172458 1172775 1172999 1173280 1173658 1174115 1174462 1174543 1178171 945190 945401 959933 983922 CVE-2014-3577 CVE-2015-1142857 CVE-2015-5262 CVE-2016-2830 CVE-2016-5289 CVE-2016-5292 CVE-2016-9063 CVE-2016-9067 CVE-2016-9068 CVE-2016-9069 CVE-2016-9071 CVE-2016-9073 CVE-2016-9075 CVE-2016-9076 CVE-2016-9077 CVE-2017-12627 CVE-2017-18255 CVE-2017-7789 CVE-2017-8288 CVE-2018-0495 CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2018-14348 CVE-2018-16890 CVE-2018-21008 CVE-2018-3639 CVE-2018-3640 CVE-2018-3646 CVE-2018-5150 CVE-2018-5151 CVE-2018-5152 CVE-2018-5153 CVE-2018-5154 CVE-2018-5155 CVE-2018-5157 CVE-2018-5158 CVE-2018-5159 CVE-2018-5160 CVE-2018-5163 CVE-2018-5164 CVE-2018-5165 CVE-2018-5166 CVE-2018-5167 CVE-2018-5168 CVE-2018-5169 CVE-2018-5172 CVE-2018-5173 CVE-2018-5174 CVE-2018-5175 CVE-2018-5176 CVE-2018-5177 CVE-2018-5178 CVE-2018-5179 CVE-2018-5180 CVE-2018-5181 CVE-2018-5182 CVE-2018-5183 CVE-2019-11091 CVE-2019-11757 CVE-2019-11758 CVE-2019-11759 CVE-2019-11760 CVE-2019-11761 CVE-2019-11762 CVE-2019-11763 CVE-2019-11764 CVE-2019-14615 CVE-2019-14896 CVE-2019-14897 CVE-2019-15903 CVE-2019-18277 CVE-2019-18348 CVE-2019-18675 CVE-2019-19066 CVE-2019-19319 CVE-2019-19447 CVE-2019-19767 CVE-2019-19768 CVE-2019-19965 CVE-2019-19966 CVE-2019-20054 CVE-2019-20096 CVE-2019-20810 CVE-2019-20812 CVE-2019-3701 CVE-2019-3822 CVE-2019-3823 CVE-2019-5108 CVE-2019-5482 CVE-2019-9455 CVE-2019-9458 CVE-2019-9674 CVE-2020-0305 CVE-2020-10135 CVE-2020-10531 CVE-2020-10690 CVE-2020-10711 CVE-2020-10720 CVE-2020-10732 CVE-2020-10751 CVE-2020-10773 CVE-2020-10942 CVE-2020-11494 CVE-2020-11608 CVE-2020-11609 CVE-2020-12771 CVE-2020-13974 CVE-2020-14416 CVE-2020-2583 CVE-2020-2590 CVE-2020-2593 CVE-2020-2601 CVE-2020-2604 CVE-2020-2654 CVE-2020-2659 CVE-2020-2732 CVE-2020-8492 CVE-2020-8647 CVE-2020-8648 CVE-2020-8649 CVE-2020-8992 CVE-2020-9383 SUSE-SU-2017:2217-1 SUSE-SU-2018:0674-1 SUSE-SU-2019:0249-1 SUSE-SU-2019:2339-2 SUSE-SU-2019:2872-1 SUSE-SU-2019:3288-1 SUSE-SU-2020:0628-1 SUSE-SU-2020:1275-1 SUSE-SU-2020:1524-1 SUSE-SU-2020:2152-1 SUSE-SU-2020:2225-1 SUSE-SU-2020:3149-1 Platform(s): openSUSE Leap 15.0 openSUSE Leap 15.1 openSUSE Leap 15.2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND Package Information chromedriver-69.0.3497.81-65 is installed OR chromium-69.0.3497.81-65 is installed OR libre2-0-20180901-11 is installed OR libre2-0-32bit-20180901-lp150.7.3 is installed OR re2-20180901-11 is installed OR re2-devel-20180901-11 is installed Definition Synopsis openSUSE Leap 15.1 is installed AND Package Information SDL2-2.0.8-lp151.4.3 is installed OR libSDL2-2_0-0-2.0.8-lp151.4.3 is installed OR libSDL2-2_0-0-32bit-2.0.8-lp151.4.3 is installed OR libSDL2-devel-2.0.8-lp151.4.3 is installed OR libSDL2-devel-32bit-2.0.8-lp151.4.3 is installed Definition Synopsis openSUSE Leap 15.2 is installed AND Package Information hylafax+-7.0.3-lp152.3.6 is installed OR hylafax+-client-7.0.3-lp152.3.6 is installed OR libfaxutil7_0_3-7.0.3-lp152.3.6 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information gnome-shell-3.20.4-77.7 is installed OR gnome-shell-browser-plugin-3.20.4-77.7 is installed OR gnome-shell-lang-3.20.4-77.7 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-BCL is installed AND Package Information curl-7.37.0-37.43 is installed OR libcurl4-7.37.0-37.43 is installed OR libcurl4-32bit-7.37.0-37.43 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND Package Information icu-52.1-8.10 is installed OR libicu-doc-52.1-8.10 is installed OR libicu52_1-52.1-8.10 is installed OR libicu52_1-32bit-52.1-8.10 is installed OR libicu52_1-data-52.1-8.10 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information kernel-default-4.4.180-94.116 is installed OR kernel-default-base-4.4.180-94.116 is installed OR kernel-default-devel-4.4.180-94.116 is installed OR kernel-default-kgraft-4.4.180-94.116 is installed OR kernel-default-man-4.4.180-94.116 is installed OR kernel-devel-4.4.180-94.116 is installed OR kernel-macros-4.4.180-94.116 is installed OR kernel-source-4.4.180-94.116 is installed OR kernel-syms-4.4.180-94.116 is installed OR kgraft-patch-4_4_180-94_116-default-1-4.3 is installed OR kgraft-patch-SLE12-SP3_Update_31-1-4.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND ucode-intel-20180807-13.29 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND busybox-1.21.1-3 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND haproxy-1.6.11-11.3 is installed Definition Synopsis SUSE OpenStack Cloud 9 is installed AND Package Information ardana-ansible-9.0+git.1587034359.a12678b-3.19 is installed OR ardana-barbican-9.0+git.1583953599.cd723bb-3.10 is installed OR ardana-cluster-9.0+git.1585653734.c1fe3b2-3.13 is installed OR ardana-db-9.0+git.1586543314.6b6aa20-3.19 is installed OR ardana-designate-9.0+git.1583445435.4bd1793-3.10 is installed OR ardana-input-model-9.0+git.1584632190.9541c56-3.16 is installed OR ardana-logging-9.0+git.1585929695.f35b591-3.10 is installed OR ardana-monasca-9.0+git.1586769889.d43d736-3.16 is installed OR ardana-mq-9.0+git.1586350749.a463fd2-3.13 is installed OR ardana-neutron-9.0+git.1587667603.507fb50-3.19 is installed OR ardana-octavia-9.0+git.1587486004.8e99c6b-3.16 is installed OR ardana-osconfig-9.0+git.1586546715.dbd07ab-3.16 is installed OR ardana-tempest-9.0+git.1587398456.b31cc4a-3.13 is installed OR ardana-tls-9.0+git.1586301209.c9413b4-3.12 is installed OR memcached-1.5.17-3.3 is installed OR openstack-ceilometer-11.1.1~dev5-3.13 is installed OR openstack-ceilometer-agent-central-11.1.1~dev5-3.13 is installed OR openstack-ceilometer-agent-compute-11.1.1~dev5-3.13 is installed OR openstack-ceilometer-agent-ipmi-11.1.1~dev5-3.13 is installed OR openstack-ceilometer-agent-notification-11.1.1~dev5-3.13 is installed OR openstack-ceilometer-polling-11.1.1~dev5-3.13 is installed OR openstack-cinder-13.0.10~dev9-3.19 is installed OR openstack-cinder-api-13.0.10~dev9-3.19 is installed OR openstack-cinder-backup-13.0.10~dev9-3.19 is installed OR openstack-cinder-scheduler-13.0.10~dev9-3.19 is installed OR openstack-cinder-volume-13.0.10~dev9-3.19 is installed OR openstack-designate-7.0.1~dev25-3.16 is installed OR openstack-designate-agent-7.0.1~dev25-3.16 is installed OR openstack-designate-api-7.0.1~dev25-3.16 is installed OR openstack-designate-central-7.0.1~dev25-3.16 is installed OR openstack-designate-producer-7.0.1~dev25-3.16 is installed OR openstack-designate-sink-7.0.1~dev25-3.16 is installed OR openstack-designate-worker-7.0.1~dev25-3.16 is installed OR openstack-heat-11.0.3~dev35-3.16 is installed OR openstack-heat-api-11.0.3~dev35-3.16 is installed OR openstack-heat-api-cfn-11.0.3~dev35-3.16 is installed OR openstack-heat-engine-11.0.3~dev35-3.16 is installed OR openstack-heat-plugin-heat_docker-11.0.3~dev35-3.16 is installed OR openstack-ironic-11.1.5~dev3-3.16 is installed OR openstack-ironic-api-11.1.5~dev3-3.16 is installed OR openstack-ironic-conductor-11.1.5~dev3-3.16 is installed OR openstack-ironic-image-9.0.0-3.6 is installed OR openstack-ironic-image-x86_64-9.0.0-3.6 is installed OR openstack-manila-7.4.2~dev4-4.21 is installed OR openstack-manila-api-7.4.2~dev4-4.21 is installed OR openstack-manila-data-7.4.2~dev4-4.21 is installed OR openstack-manila-scheduler-7.4.2~dev4-4.21 is installed OR openstack-manila-share-7.4.2~dev4-4.21 is installed OR openstack-neutron-13.0.8~dev28-3.22 is installed OR openstack-neutron-dhcp-agent-13.0.8~dev28-3.22 is installed OR openstack-neutron-ha-tool-13.0.8~dev28-3.22 is installed OR openstack-neutron-l3-agent-13.0.8~dev28-3.22 is installed OR openstack-neutron-linuxbridge-agent-13.0.8~dev28-3.22 is installed OR openstack-neutron-macvtap-agent-13.0.8~dev28-3.22 is installed OR openstack-neutron-metadata-agent-13.0.8~dev28-3.22 is installed OR openstack-neutron-metering-agent-13.0.8~dev28-3.22 is installed OR openstack-neutron-openvswitch-agent-13.0.8~dev28-3.22 is installed OR openstack-neutron-server-13.0.8~dev28-3.22 is installed OR openstack-nova-18.3.1~dev17-3.22 is installed OR openstack-nova-api-18.3.1~dev17-3.22 is installed OR openstack-nova-cells-18.3.1~dev17-3.22 is installed OR openstack-nova-compute-18.3.1~dev17-3.22 is installed OR openstack-nova-conductor-18.3.1~dev17-3.22 is installed OR openstack-nova-console-18.3.1~dev17-3.22 is installed OR openstack-nova-novncproxy-18.3.1~dev17-3.22 is installed OR openstack-nova-placement-api-18.3.1~dev17-3.22 is installed OR openstack-nova-scheduler-18.3.1~dev17-3.22 is installed OR openstack-nova-serialproxy-18.3.1~dev17-3.22 is installed OR openstack-nova-vncproxy-18.3.1~dev17-3.22 is installed OR openstack-octavia-3.2.3~dev2-3.22 is installed OR openstack-octavia-amphora-agent-3.2.3~dev2-3.22 is installed OR openstack-octavia-amphora-image-0.1.3-7.9 is installed OR openstack-octavia-amphora-image-x86_64-0.1.3-7.9 is installed OR openstack-octavia-api-3.2.3~dev2-3.22 is installed OR openstack-octavia-health-manager-3.2.3~dev2-3.22 is installed OR openstack-octavia-housekeeping-3.2.3~dev2-3.22 is installed OR openstack-octavia-worker-3.2.3~dev2-3.22 is installed OR python-ceilometer-11.1.1~dev5-3.13 is installed OR python-cinder-13.0.10~dev9-3.19 is installed OR python-cinderclient-4.0.3-3.6 is installed OR python-cinderclient-doc-4.0.3-3.6 is installed OR python-designate-7.0.1~dev25-3.16 is installed OR python-glanceclient-2.13.2-3.3 is installed OR python-glanceclient-doc-2.13.2-3.3 is installed OR python-heat-11.0.3~dev35-3.16 is installed OR python-ironic-11.1.5~dev3-3.16 is installed OR python-ironic-lib-2.14.3-3.6 is installed OR python-ironicclient-2.5.4-4.10 is installed OR python-ironicclient-doc-2.5.4-4.10 is installed OR python-keystonemiddleware-5.2.2-17 is installed OR python-manila-7.4.2~dev4-4.21 is installed OR python-manila-tempest-plugin-0.1.0-3.6 is installed OR python-neutron-13.0.8~dev28-3.22 is installed OR python-nova-18.3.1~dev17-3.22 is installed OR python-novaclient-11.0.1-3.3 is installed OR python-novaclient-doc-11.0.1-3.3 is installed OR python-octavia-3.2.3~dev2-3.22 is installed OR python-octaviaclient-1.6.2-3.6 is installed OR python-openstackclient-3.16.3-11 is installed OR python-os-brick-2.5.10-3.9 is installed OR python-os-brick-common-2.5.10-3.9 is installed OR python-oslo.config-6.4.2-3.3 is installed OR python-oslo.config-doc-6.4.2-3.3 is installed OR python-oslo.rootwrap-5.14.2-3.3 is installed OR python-oslo.utils-3.36.5-3.3 is installed OR python-swiftclient-3.6.1-3.3 is installed OR python-swiftclient-doc-3.6.1-3.3 is installed OR python-watcherclient-2.1.1-3.3 is installed OR release-notes-suse-openstack-cloud-9.20200319-3.18 is installed OR venv-openstack-barbican-7.0.1~dev24-3.17 is installed OR venv-openstack-barbican-x86_64-7.0.1~dev24-3.17 is installed OR venv-openstack-cinder-13.0.10~dev9-3.17 is installed OR venv-openstack-cinder-x86_64-13.0.10~dev9-3.17 is installed OR venv-openstack-designate-7.0.1~dev25-3.17 is installed OR venv-openstack-designate-x86_64-7.0.1~dev25-3.17 is installed OR venv-openstack-glance-17.0.1~dev30-3.15 is installed OR venv-openstack-glance-x86_64-17.0.1~dev30-3.15 is installed OR venv-openstack-heat-11.0.3~dev35-3.17 is installed OR venv-openstack-heat-x86_64-11.0.3~dev35-3.17 is installed OR venv-openstack-horizon-14.1.1~dev1-4.16 is installed OR venv-openstack-horizon-x86_64-14.1.1~dev1-4.16 is installed OR venv-openstack-ironic-11.1.5~dev3-4.13 is installed OR venv-openstack-ironic-x86_64-11.1.5~dev3-4.13 is installed OR venv-openstack-keystone-14.1.1~dev36-3.17 is installed OR venv-openstack-keystone-x86_64-14.1.1~dev36-3.17 is installed OR venv-openstack-magnum-7.2.1~dev1-4.17 is installed OR venv-openstack-magnum-x86_64-7.2.1~dev1-4.17 is installed OR venv-openstack-manila-7.4.2~dev4-3.19 is installed OR venv-openstack-manila-x86_64-7.4.2~dev4-3.19 is installed OR venv-openstack-monasca-2.7.1~dev10-3.15 is installed OR venv-openstack-monasca-ceilometer-1.8.2~dev3-3.17 is installed OR venv-openstack-monasca-ceilometer-x86_64-1.8.2~dev3-3.17 is installed OR venv-openstack-monasca-x86_64-2.7.1~dev10-3.15 is installed OR venv-openstack-neutron-13.0.8~dev28-6.17 is installed OR venv-openstack-neutron-x86_64-13.0.8~dev28-6.17 is installed OR venv-openstack-nova-18.3.1~dev17-3.17 is installed OR venv-openstack-nova-x86_64-18.3.1~dev17-3.17 is installed OR venv-openstack-octavia-3.2.3~dev2-4.17 is installed OR venv-openstack-octavia-x86_64-3.2.3~dev2-4.17 is installed OR venv-openstack-sahara-9.0.2~dev15-3.17 is installed OR venv-openstack-sahara-x86_64-9.0.2~dev15-3.17 is installed OR venv-openstack-swift-2.19.2~dev48-2.12 is installed OR venv-openstack-swift-x86_64-2.19.2~dev48-2.12 is installed OR zookeeper-3.4.13-3.3 is installed OR zookeeper-server-3.4.13-3.3 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND Package Information MozillaFirefox-68.2.0-109.95 is installed OR MozillaFirefox-translations-common-68.2.0-109.95 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 9 is installed AND Package Information grub2-2.02-12.39 is installed OR grub2-i386-pc-2.02-12.39 is installed OR grub2-snapper-plugin-2.02-12.39 is installed OR grub2-systemd-sleep-plugin-2.02-12.39 is installed OR grub2-x86_64-efi-2.02-12.39 is installed OR grub2-x86_64-xen-2.02-12.39 is installed
BACK