Oval Definition:oval:org.opensuse.security:def:60710
Revision Date:2020-12-01Version:1
Title:Security update for perl (Important)
Description:

This update for perl fixes the following issues:

- CVE-2020-10543: Fixed a heap buffer overflow in regular expression compiler which could have allowed overwriting of allocated memory with attacker's data (bsc#1171863). - CVE-2020-10878: Fixed multiple integer overflows which could have allowed the insertion of instructions into the compiled form of Perl regular expression (bsc#1171864). - CVE-2020-12723: Fixed an attacker's corruption of the intermediate language state of a compiled regular expression (bsc#1171866). - Fixed utf8 handling in perldoc by useing 'term' instead of 'man' (bsc#1170601). - Some packages make assumptions about the date and time they are built. This update will solve the issues caused by calling the perl function timelocal expressing the year with two digit only instead of four digits. (bsc#1102840) (bsc#1160039)
Family:unixClass:patch
Status:Reference(s):1042829
1062645
1077375
1077692
1080249
1083213
1083993
1088662
1089124
1102840
1106853
1106914
1108627
1108637
1110358
1121826
1152856
1154212
1155419
1160039
1160305
1160467
1160468
1160471
1160498
1170441
1170446
1170601
1171186
1171863
1171864
1171866
1172140
1172437
1173594
1174628
1177158
943457
CVE-2017-11613
CVE-2017-15191
CVE-2017-15192
CVE-2017-15193
CVE-2017-7500
CVE-2017-7501
CVE-2017-9432
CVE-2017-9433
CVE-2017-9935
CVE-2018-1055
CVE-2018-16335
CVE-2018-17100
CVE-2018-17101
CVE-2018-17795
CVE-2018-6871
CVE-2019-14896
CVE-2019-14897
CVE-2019-15666
CVE-2019-15681
CVE-2019-15690
CVE-2019-17015
CVE-2019-17016
CVE-2019-17017
CVE-2019-17021
CVE-2019-17022
CVE-2019-17024
CVE-2019-17026
CVE-2019-20788
CVE-2019-2894
CVE-2019-2933
CVE-2019-2945
CVE-2019-2949
CVE-2019-2958
CVE-2019-2962
CVE-2019-2964
CVE-2019-2973
CVE-2019-2978
CVE-2019-2981
CVE-2019-2983
CVE-2019-2987
CVE-2019-2988
CVE-2019-2989
CVE-2019-2992
CVE-2019-2999
CVE-2019-6133
CVE-2020-10543
CVE-2020-10757
CVE-2020-10878
CVE-2020-12387
CVE-2020-12388
CVE-2020-12389
CVE-2020-12392
CVE-2020-12393
CVE-2020-12395
CVE-2020-12723
CVE-2020-14344
CVE-2020-14355
CVE-2020-6831
CVE-2020-8695
CVE-2020-8698
SUSE-SU-2017:2860-1
SUSE-SU-2018:1076-1
SUSE-SU-2019:2035-1
SUSE-SU-2019:3084-1
SUSE-SU-2020:0068-1
SUSE-SU-2020:0204-1
SUSE-SU-2020:1165-1
SUSE-SU-2020:1218-1
SUSE-SU-2020:1662-1
SUSE-SU-2020:2117-1
SUSE-SU-2020:3085-1
SUSE-SU-2020:3279-1
Platform(s):openSUSE Leap 15.0
openSUSE Leap 15.1
openSUSE Leap 15.2
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-BCL
SUSE Linux Enterprise Server 12 SP3-ESPOS
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server 12 SP4-ESPOS
SUSE OpenStack Cloud 8
SUSE OpenStack Cloud 9
SUSE OpenStack Cloud Crowbar 8
SUSE OpenStack Cloud Crowbar 9
Product(s):
Definition Synopsis
  • openSUSE Leap 15.0 is installed
  • AND Package Information
  • ImageMagick-7.0.7.34-lp150.2.18 is installed
  • OR ImageMagick-devel-7.0.7.34-lp150.2.18 is installed
  • OR ImageMagick-devel-32bit-7.0.7.34-lp150.2.18 is installed
  • OR ImageMagick-doc-7.0.7.34-lp150.2.18 is installed
  • OR ImageMagick-extra-7.0.7.34-lp150.2.18 is installed
  • OR libMagick++-7_Q16HDRI4-7.0.7.34-lp150.2.18 is installed
  • OR libMagick++-7_Q16HDRI4-32bit-7.0.7.34-lp150.2.18 is installed
  • OR libMagick++-devel-7.0.7.34-lp150.2.18 is installed
  • OR libMagick++-devel-32bit-7.0.7.34-lp150.2.18 is installed
  • OR libMagickCore-7_Q16HDRI6-7.0.7.34-lp150.2.18 is installed
  • OR libMagickCore-7_Q16HDRI6-32bit-7.0.7.34-lp150.2.18 is installed
  • OR libMagickWand-7_Q16HDRI6-7.0.7.34-lp150.2.18 is installed
  • OR libMagickWand-7_Q16HDRI6-32bit-7.0.7.34-lp150.2.18 is installed
  • OR perl-PerlMagick-7.0.7.34-lp150.2.18 is installed
    • Definition Synopsis
  • openSUSE Leap 15.1 is installed
  • AND Package Information
  • rmt-server-2.3.1-lp151.2.3 is installed
  • OR rmt-server-config-2.3.1-lp151.2.3 is installed
  • OR rmt-server-pubcloud-2.3.1-lp151.2.3 is installed
    • Definition Synopsis
  • openSUSE Leap 15.2 is installed
  • AND Package Information
  • libfreebl3-3.53.1-lp152.2.4 is installed
  • OR libfreebl3-32bit-3.53.1-lp152.2.4 is installed
  • OR libfreebl3-hmac-3.53.1-lp152.2.4 is installed
  • OR libfreebl3-hmac-32bit-3.53.1-lp152.2.4 is installed
  • OR libsoftokn3-3.53.1-lp152.2.4 is installed
  • OR libsoftokn3-32bit-3.53.1-lp152.2.4 is installed
  • OR libsoftokn3-hmac-3.53.1-lp152.2.4 is installed
  • OR libsoftokn3-hmac-32bit-3.53.1-lp152.2.4 is installed
  • OR mozilla-nss-3.53.1-lp152.2.4 is installed
  • OR mozilla-nss-32bit-3.53.1-lp152.2.4 is installed
  • OR mozilla-nss-certs-3.53.1-lp152.2.4 is installed
  • OR mozilla-nss-certs-32bit-3.53.1-lp152.2.4 is installed
  • OR mozilla-nss-devel-3.53.1-lp152.2.4 is installed
  • OR mozilla-nss-sysinit-3.53.1-lp152.2.4 is installed
  • OR mozilla-nss-sysinit-32bit-3.53.1-lp152.2.4 is installed
  • OR mozilla-nss-tools-3.53.1-lp152.2.4 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND Package Information
  • libwireshark8-2.2.10-48.12 is installed
  • OR libwiretap6-2.2.10-48.12 is installed
  • OR libwscodecs1-2.2.10-48.12 is installed
  • OR libwsutil7-2.2.10-48.12 is installed
  • OR wireshark-2.2.10-48.12 is installed
  • OR wireshark-gtk-2.2.10-48.12 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-BCL is installed
  • AND Package Information
  • LibVNCServer-0.9.9-17.19 is installed
  • OR libvncclient0-0.9.9-17.19 is installed
  • OR libvncserver0-0.9.9-17.19 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-ESPOS is installed
  • AND Package Information
  • kgraft-patch-4_4_180-94_100-default-8-2 is installed
  • OR kgraft-patch-SLE12-SP3_Update_27-8-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-LTSS is installed
  • AND Package Information
  • java-1_7_0-openjdk-1.7.0.241-43.30 is installed
  • OR java-1_7_0-openjdk-demo-1.7.0.241-43.30 is installed
  • OR java-1_7_0-openjdk-devel-1.7.0.241-43.30 is installed
  • OR java-1_7_0-openjdk-headless-1.7.0.241-43.30 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
  • AND shadow-4.2.1-27.19 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND Package Information
  • bind-9.11.2-1 is installed
  • OR bind-chrootenv-9.11.2-1 is installed
  • OR bind-doc-9.11.2-1 is installed
  • OR bind-utils-9.11.2-1 is installed
  • OR libbind9-160-9.11.2-1 is installed
  • OR libdns169-9.11.2-1 is installed
  • OR libirs160-9.11.2-1 is installed
  • OR libisc166-9.11.2-1 is installed
  • OR libisc166-32bit-9.11.2-1 is installed
  • OR libisccc160-9.11.2-1 is installed
  • OR libisccfg160-9.11.2-1 is installed
  • OR liblwres160-9.11.2-1 is installed
  • OR python-bind-9.11.2-1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4-ESPOS is installed
  • AND mailman-2.1.17-3.23 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud 8 is installed
  • AND Package Information
  • perl-5.18.2-12.23 is installed
  • OR perl-32bit-5.18.2-12.23 is installed
  • OR perl-base-5.18.2-12.23 is installed
  • OR perl-doc-5.18.2-12.23 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud 9 is installed
  • AND Package Information
  • pdns-4.1.8-3.6 is installed
  • OR pdns-backend-mysql-4.1.8-3.6 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud Crowbar 8 is installed
  • AND Package Information
  • libpolkit0-0.113-5.18 is installed
  • OR polkit-0.113-5.18 is installed
  • OR typelib-1_0-Polkit-1_0-0.113-5.18 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud Crowbar 9 is installed
  • AND python-Werkzeug-0.14.1-3.3 is installed
    • BACK