Oval Definition:oval:org.opensuse.security:def:60968
Revision Date:2020-12-01Version:1
Title:Security update for tigervnc (Important)
Description:

This update for tigervnc fixes the following issues:

- CVE-2019-15691: Fixed a use-after-return due to incorrect usage of stack memory in ZRLEDecoder (bsc#1159856). - CVE-2019-15692: Fixed a heap-based buffer overflow in CopyRectDecode (bsc#1160250). - CVE-2019-15693: Fixed a heap-based buffer overflow in TightDecoder::FilterGradient (bsc#1159858). - CVE-2019-15694: Fixed a heap-based buffer overflow, caused by improper error handling in processing MemOutStream (bsc#1160251). - CVE-2019-15695: Fixed a stack-based buffer overflow, which could be triggered from CMsgReader::readSetCursor (bsc#1159860).
Family:unixClass:patch
Status:Reference(s):1012382
1015342
1015343
1017967
1019695
1019699
1020412
1021121
1022604
1024361
1024365
1024376
1027968
1029638
1029639
1029706
1029707
1029751
1030552
1033962
1042286
1048317
1050431
1053685
1055014
1056596
1062604
1063646
1064232
1065364
1066223
1068032
1068075
1069138
1077355
1078921
1080157
1083663
1085042
1085536
1085539
1086457
1087092
1089066
1090888
1091171
1091860
1092903
1096254
1096748
1097105
1098253
1098822
1099597
1099810
1099811
1099813
1099832
1099844
1099845
1099846
1099849
1099863
1099864
1099922
1099999
1100000
1100001
1100132
1101822
1101841
1102346
1102486
1102517
1102715
1102797
1103269
1103445
1104319
1104485
1104494
1104495
1104683
1104897
1105271
1105292
1105322
1105392
1105396
1105524
1105536
1105769
1106016
1106105
1106185
1106229
1106271
1106275
1106276
1106278
1106281
1106283
1106369
1106509
1106511
1106594
1106697
1106929
1106934
1106995
1107060
1107078
1107319
1107320
1107689
1107735
1107966
1111622
1122668
1126230
1127367
1127369
1127370
1129186
1131361
1133037
1136082
1141619
1157607
1158328
1159856
1159858
1159860
1160250
1160251
1160937
1161096
1162553
1168422
1171670
1171921
1171960
1171961
1171963
1173580
1174157
1175259
1176756
1177872
963575
966170
966172
969470
969476
969477
970506
CVE-2015-1142857
CVE-2017-5715
CVE-2017-6435
CVE-2017-6436
CVE-2017-6437
CVE-2017-6438
CVE-2017-6439
CVE-2018-10876
CVE-2018-10877
CVE-2018-10878
CVE-2018-10879
CVE-2018-10880
CVE-2018-10881
CVE-2018-10882
CVE-2018-10883
CVE-2018-10902
CVE-2018-10938
CVE-2018-10940
CVE-2018-1128
CVE-2018-1129
CVE-2018-12896
CVE-2018-13093
CVE-2018-13094
CVE-2018-13095
CVE-2018-15572
CVE-2018-16658
CVE-2018-18074
CVE-2018-6554
CVE-2018-6555
CVE-2018-9363
CVE-2019-0161
CVE-2019-1010006
CVE-2019-11459
CVE-2019-11745
CVE-2019-13722
CVE-2019-15691
CVE-2019-15692
CVE-2019-15693
CVE-2019-15694
CVE-2019-15695
CVE-2019-17005
CVE-2019-17008
CVE-2019-17009
CVE-2019-17010
CVE-2019-17011
CVE-2019-17012
CVE-2019-17639
CVE-2019-3838
CVE-2019-9208
CVE-2019-9209
CVE-2019-9214
CVE-2020-10753
CVE-2020-14577
CVE-2020-14578
CVE-2020-14579
CVE-2020-14583
CVE-2020-14593
CVE-2020-14621
CVE-2020-15683
CVE-2020-15969
CVE-2020-3898
CVE-2020-4044
SUSE-SU-2017:2201-1
SUSE-SU-2018:0674-1
SUSE-SU-2018:1503-1
SUSE-SU-2018:2858-1
SUSE-SU-2019:2080-1
SUSE-SU-2020:0159-1
SUSE-SU-2020:0555-1
SUSE-SU-2020:1045-1
SUSE-SU-2020:1991-1
SUSE-SU-2020:2482-1
SUSE-SU-2020:3053-1
Platform(s):openSUSE Leap 15.1
openSUSE Leap 15.2
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-BCL
SUSE Linux Enterprise Server 12 SP3-ESPOS
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server 12 SP4-ESPOS
SUSE Linux Enterprise Server 12 SP4-LTSS
SUSE OpenStack Cloud 9
SUSE OpenStack Cloud Crowbar 8
Product(s):
Definition Synopsis
  • openSUSE Leap 15.1 is installed
  • AND Package Information
  • gd-2.2.5-lp151.6.6 is installed
  • OR gd-devel-2.2.5-lp151.6.6 is installed
  • OR libgd3-2.2.5-lp151.6.6 is installed
  • OR libgd3-32bit-2.2.5-lp151.6.6 is installed
  • Definition Synopsis
  • openSUSE Leap 15.2 is installed
  • AND Package Information
  • go1.13-1.13.14-lp152.2.4 is installed
  • OR go1.13-doc-1.13.14-lp152.2.4 is installed
  • OR go1.13-race-1.13.14-lp152.2.4 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND Package Information
  • libplist-1.12-20.3 is installed
  • OR libplist3-1.12-20.3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-BCL is installed
  • AND Package Information
  • evince-3.20.2-6.27 is installed
  • OR evince-browser-plugin-3.20.2-6.27 is installed
  • OR evince-lang-3.20.2-6.27 is installed
  • OR evince-plugin-djvudocument-3.20.2-6.27 is installed
  • OR evince-plugin-dvidocument-3.20.2-6.27 is installed
  • OR evince-plugin-pdfdocument-3.20.2-6.27 is installed
  • OR evince-plugin-psdocument-3.20.2-6.27 is installed
  • OR evince-plugin-tiffdocument-3.20.2-6.27 is installed
  • OR evince-plugin-xpsdocument-3.20.2-6.27 is installed
  • OR libevdocument3-4-3.20.2-6.27 is installed
  • OR libevview3-3-3.20.2-6.27 is installed
  • OR nautilus-evince-3.20.2-6.27 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-ESPOS is installed
  • AND Package Information
  • ceph-12.2.13+git.1592168685.85110a3e9d-2.50 is installed
  • OR ceph-common-12.2.13+git.1592168685.85110a3e9d-2.50 is installed
  • OR libcephfs2-12.2.13+git.1592168685.85110a3e9d-2.50 is installed
  • OR librados2-12.2.13+git.1592168685.85110a3e9d-2.50 is installed
  • OR libradosstriper1-12.2.13+git.1592168685.85110a3e9d-2.50 is installed
  • OR librbd1-12.2.13+git.1592168685.85110a3e9d-2.50 is installed
  • OR librgw2-12.2.13+git.1592168685.85110a3e9d-2.50 is installed
  • OR python-cephfs-12.2.13+git.1592168685.85110a3e9d-2.50 is installed
  • OR python-rados-12.2.13+git.1592168685.85110a3e9d-2.50 is installed
  • OR python-rbd-12.2.13+git.1592168685.85110a3e9d-2.50 is installed
  • OR python-rgw-12.2.13+git.1592168685.85110a3e9d-2.50 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-LTSS is installed
  • AND Package Information
  • cups-1.7.5-20.29 is installed
  • OR cups-client-1.7.5-20.29 is installed
  • OR cups-libs-1.7.5-20.29 is installed
  • OR cups-libs-32bit-1.7.5-20.29 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
  • AND Package Information
  • ovmf-2017+git1492060560.b6d11d7c46-4.26 is installed
  • OR ovmf-tools-2017+git1492060560.b6d11d7c46-4.26 is installed
  • OR qemu-ovmf-x86_64-2017+git1492060560.b6d11d7c46-4.26 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND Package Information
  • audiofile-0.3.6-10 is installed
  • OR libaudiofile1-0.3.6-10 is installed
  • OR libaudiofile1-32bit-0.3.6-10 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4-ESPOS is installed
  • AND Package Information
  • libfreebl3-3.53.1-58.48 is installed
  • OR libfreebl3-32bit-3.53.1-58.48 is installed
  • OR libfreebl3-hmac-3.53.1-58.48 is installed
  • OR libfreebl3-hmac-32bit-3.53.1-58.48 is installed
  • OR libsoftokn3-3.53.1-58.48 is installed
  • OR libsoftokn3-32bit-3.53.1-58.48 is installed
  • OR libsoftokn3-hmac-3.53.1-58.48 is installed
  • OR libsoftokn3-hmac-32bit-3.53.1-58.48 is installed
  • OR mozilla-nspr-4.25-19.15 is installed
  • OR mozilla-nspr-32bit-4.25-19.15 is installed
  • OR mozilla-nspr-devel-4.25-19.15 is installed
  • OR mozilla-nss-3.53.1-58.48 is installed
  • OR mozilla-nss-32bit-3.53.1-58.48 is installed
  • OR mozilla-nss-certs-3.53.1-58.48 is installed
  • OR mozilla-nss-certs-32bit-3.53.1-58.48 is installed
  • OR mozilla-nss-devel-3.53.1-58.48 is installed
  • OR mozilla-nss-sysinit-3.53.1-58.48 is installed
  • OR mozilla-nss-sysinit-32bit-3.53.1-58.48 is installed
  • OR mozilla-nss-tools-3.53.1-58.48 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4-LTSS is installed
  • AND golang-github-prometheus-node_exporter-0.18.1-1.6 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud 9 is installed
  • AND python-Django1-1.11.23-3.9 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud Crowbar 8 is installed
  • AND Package Information
  • libXvnc1-1.6.0-18.28 is installed
  • OR tigervnc-1.6.0-18.28 is installed
  • OR xorg-x11-Xvnc-1.6.0-18.28 is installed
  • BACK