Oval Definition:	oval:org.opensuse.security:def:6180
Revision Date: 2022-03-03 Version: 1 Title: Security update for expat (Important) Description: This update for expat fixes the following issues: - CVE-2022-25236: Fixed possible namespace-separator characters insertion into namespace URIs (bsc#1196025). - CVE-2022-25235: Fixed UTF-8 character validation in a certain context (bsc#1196026). - CVE-2022-25313: Fixed stack exhaustion in build_model() via uncontrolled recursion (bsc#1196168). - CVE-2022-25314: Fixed integer overflow in copyString (bsc#1196169). - CVE-2022-25315: Fixed integer overflow in storeRawNames (bsc#1196171). Family: unix Class: patch Status: Reference(s): 1189724 1196025 1196026 1196168 1196169 1196171 CVE-2006-7250 CVE-2007-6746 CVE-2009-0590 CVE-2009-0591 CVE-2009-0789 CVE-2009-1377 CVE-2009-1378 CVE-2009-1379 CVE-2009-1386 CVE-2009-1387 CVE-2009-3245 CVE-2009-3555 CVE-2009-4355 CVE-2009-5146 CVE-2010-0405 CVE-2010-0740 CVE-2010-2939 CVE-2010-3864 CVE-2010-4180 CVE-2010-4252 CVE-2010-4530 CVE-2011-0014 CVE-2011-2721 CVE-2011-3210 CVE-2011-3627 CVE-2011-4108 CVE-2011-4109 CVE-2011-4354 CVE-2011-4576 CVE-2011-4577 CVE-2011-4619 CVE-2011-5095 CVE-2012-0035 CVE-2012-0050 CVE-2012-0884 CVE-2012-1165 CVE-2012-1457 CVE-2012-1458 CVE-2012-1459 CVE-2012-2110 CVE-2012-2131 CVE-2012-2333 CVE-2012-3355 CVE-2012-3386 CVE-2012-4929 CVE-2012-6706 CVE-2013-0166 CVE-2013-0169 CVE-2013-4143 CVE-2013-6487 CVE-2013-6497 CVE-2014-0076 CVE-2014-0221 CVE-2014-0224 CVE-2014-1545 CVE-2014-3421 CVE-2014-3422 CVE-2014-3423 CVE-2014-3424 CVE-2014-3470 CVE-2014-3505 CVE-2014-3506 CVE-2014-3507 CVE-2014-3508 CVE-2014-3510 CVE-2014-3566 CVE-2014-3567 CVE-2014-3568 CVE-2014-3570 CVE-2014-3571 CVE-2014-3572 CVE-2014-3775 CVE-2014-8275 CVE-2014-9050 CVE-2014-9328 CVE-2015-0204 CVE-2015-0205 CVE-2015-0209 CVE-2015-0286 CVE-2015-0287 CVE-2015-0288 CVE-2015-0289 CVE-2015-0292 CVE-2015-0293 CVE-2015-1461 CVE-2015-1462 CVE-2015-1463 CVE-2015-1788 CVE-2015-1789 CVE-2015-1790 CVE-2015-1791 CVE-2015-1792 CVE-2015-2170 CVE-2015-2221 CVE-2015-2222 CVE-2015-2305 CVE-2015-2668 CVE-2015-3195 CVE-2015-3197 CVE-2015-3216 CVE-2015-4000 CVE-2015-5185 CVE-2015-5276 CVE-2015-7183 CVE-2016-0702 CVE-2016-0797 CVE-2016-0799 CVE-2016-0800 CVE-2016-2105 CVE-2016-2106 CVE-2016-2108 CVE-2016-2109 CVE-2016-2177 CVE-2016-2178 CVE-2016-2179 CVE-2016-2181 CVE-2016-2182 CVE-2016-2183 CVE-2016-5104 CVE-2016-6302 CVE-2016-6303 CVE-2016-6304 CVE-2016-6306 CVE-2016-7056 CVE-2016-8610 CVE-2017-11423 CVE-2017-12374 CVE-2017-12375 CVE-2017-12376 CVE-2017-12377 CVE-2017-12378 CVE-2017-12379 CVE-2017-12380 CVE-2017-2625 CVE-2017-6418 CVE-2017-6419 CVE-2017-6420 CVE-2017-7435 CVE-2017-7436 CVE-2017-9269 CVE-2018-0202 CVE-2018-0360 CVE-2018-0361 CVE-2018-0732 CVE-2018-0737 CVE-2018-0739 CVE-2018-1000085 CVE-2018-14680 CVE-2018-14681 CVE-2018-14682 CVE-2018-15378 CVE-2018-7685 CVE-2021-38171 CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315 SUSE-SU-2022:0698-1 Platform(s): openSUSE 13.1 openSUSE 13.1 NonFree openSUSE 13.2 openSUSE 13.2 NonFree openSUSE Leap 42.1 SUSE Linux Enterprise Build System Kit 12 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Build System Kit 12 SP2 SUSE Linux Enterprise Build System Kit 12 SP3 SUSE Linux Enterprise Build System Kit 12 SP4 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise for SAP 12 SUSE Linux Enterprise for SAP 12 SP1 SUSE Linux Enterprise High Availability 12 SP2 SUSE Linux Enterprise High Availability 12 SP4 SUSE Linux Enterprise High Availability 12 SP5 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Live Patching 12 SUSE Linux Enterprise Live Patching 12 SP3 SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for Legacy Software 12 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP3 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 11-SECURITY SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SP4 Product(s): Definition Synopsis SUSE Linux Enterprise Build System Kit 12 is installed AND kernel-zfcpdump-3.12.38-44 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND Package Information python-tdb-1.3.8-4 is installed OR python-tevent-0.9.26-4 is installed OR tdb-1.3.8-4 is installed OR tevent-0.9.26-4 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP2 is installed AND Package Information ghostscript-mini-9.15-17 is installed OR ghostscript-mini-devel-9.15-17 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP3 is installed AND Package Information libreoffice-5.3.5.2-43.5 is installed OR libreoffice-sdk-5.3.5.2-43.5 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP4 is installed AND Package Information libreoffice-6.0.5.2-43.38 is installed OR libreoffice-sdk-6.0.5.2-43.38 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information Mesa-7.11.2-0.9.1 is installed OR Mesa-32bit-7.11.2-0.9.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information augeas-0.9.0-3.17.2 is installed OR libaugeas0-0.9.0-3.17.2 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information tigervnc-1.3.0-22 is installed OR xorg-x11-Xvnc-1.3.0-22 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND pcsc-ccid-1.4.14-1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND sblim-sfcb-1.4.8-16 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND clamav-0.100.2-33.18 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 is installed AND Package Information kgraft-patch-3_12_61-52_72-default-3-2 is installed OR kgraft-patch-3_12_61-52_72-xen-3-2 is installed OR kgraft-patch-SLE12_Update_21-3-2 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 SP1 is installed AND Package Information evince-3.10.3-2.3.1 is installed OR evince-lang-3.10.3-2.3.1 is installed OR libevdocument3-4-3.10.3-2.3.1 is installed OR libevview3-3-3.10.3-2.3.1 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP2 is installed AND ruby2.1-rubygem-bundler-1.7.3-3 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP4 is installed AND Package Information libpacemaker3-1.1.19+20180928.0d2680780-1 is installed OR pacemaker-1.1.19+20180928.0d2680780-1 is installed OR pacemaker-cli-1.1.19+20180928.0d2680780-1 is installed OR pacemaker-cts-1.1.19+20180928.0d2680780-1 is installed OR pacemaker-remote-1.1.19+20180928.0d2680780-1 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP5 is installed AND libpcreposix0-8.39-8.3 is installed Definition Synopsis SUSE Linux Enterprise High Performance Computing 12 SP5 is installed AND Package Information colord-gtk-lang-0.1.26-6 is installed OR libcolord-gtk1-0.1.26-6 is installed OR libcolord2-1.3.3-12 is installed OR libcolord2-32bit-1.3.3-12 is installed OR libcolorhug2-1.3.3-12 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 is installed AND Package Information kgraft-patch-3_12_57-60_35-default-5-2 is installed OR kgraft-patch-3_12_57-60_35-xen-5-2 is installed OR kgraft-patch-SLE12-SP1_Update_4-5-2 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 SP3 is installed AND Package Information kgraft-patch-4_4_73-5-default-2-2.3 is installed OR kgraft-patch-SLE12-SP3_Update_0-2-2.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Advanced Systems Management 12 is installed AND Package Information salt-2016.11.4-46.7 is installed OR salt-api-2016.11.4-46.7 is installed OR salt-bash-completion-2016.11.4-46.7 is installed OR salt-cloud-2016.11.4-46.7 is installed OR salt-doc-2016.11.4-46.7 is installed OR salt-master-2016.11.4-46.7 is installed OR salt-minion-2016.11.4-46.7 is installed OR salt-proxy-2016.11.4-46.7 is installed OR salt-ssh-2016.11.4-46.7 is installed OR salt-syndic-2016.11.4-46.7 is installed OR salt-zsh-completion-2016.11.4-46.7 is installed Definition Synopsis SUSE Linux Enterprise Module for Containers 12 is installed AND Package Information ruby2.1-rubygem-rack-1_4-1.4.5-8 is installed OR rubygem-rack-1_4-1.4.5-8 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 12 is installed AND Package Information cups154-1.5.4-9 is installed OR cups154-client-1.5.4-9 is installed OR cups154-filters-1.5.4-9 is installed OR cups154-libs-1.5.4-9 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 12 is installed AND Package Information kernel-ec2-3.12.39-47 is installed OR kernel-ec2-devel-3.12.39-47 is installed OR kernel-ec2-extra-3.12.39-47 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP1 is installed AND Package Information evince-2.28.2-0.2.68 is installed OR evince-doc-2.28.2-0.2.68 is installed OR evince-lang-2.28.2-0.2.68 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2 is installed AND apache2-mod_jk-1.2.26-1.30.110 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP3 is installed AND MozillaFirefox-31.5.3esr-0.8.1 is installed OR MozillaFirefox-translations-31.5.3esr-0.8.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP3 is installed AND MozillaFirefox-31.5.3esr-0.8.1 is installed OR MozillaFirefox-translations-31.5.3esr-0.8.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3 is installed AND libadns1-1.4-73.21 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3-LTSS is installed AND Package Information libopenssl0_9_8-0.9.8j-0.89.1 is installed OR libopenssl0_9_8-32bit-0.9.8j-0.89.1 is installed OR libopenssl0_9_8-hmac-0.9.8j-0.89.1 is installed OR libopenssl0_9_8-hmac-32bit-0.9.8j-0.89.1 is installed OR openssl-0.9.8j-0.89.1 is installed OR openssl-doc-0.9.8j-0.89.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND Package Information OpenEXR-1.6.1-83.17.1 is installed OR OpenEXR-32bit-1.6.1-83.17.1 is installed OR OpenEXR-x86-1.6.1-83.17.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11-SECURITY is installed AND Package Information libldap-openssl1-2_4-2-2.4.26-0.30.2 is installed OR libldap-openssl1-2_4-2-32bit-2.4.26-0.30.2 is installed OR libldap-openssl1-2_4-2-x86-2.4.26-0.30.2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND apache2-mod_jk-1.2.40-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information augeas-1.2.0-3 is installed OR augeas-lenses-1.2.0-3 is installed OR libaugeas0-1.2.0-3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information aaa_base-13.2+git20140911.61c1681-28 is installed OR aaa_base-extras-13.2+git20140911.61c1681-28 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information apache-commons-daemon-1.0.15-6 is installed OR apache-commons-daemon-javadoc-1.0.15-6 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND ant-1.9.4-3.3 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP5 is installed AND expat-2.1.0-21.18.1 is installed OR libexpat1-2.1.0-21.18.1 is installed OR libexpat1-32bit-2.1.0-21.18.1 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed AND expat-2.1.0-21.18.1 is installed OR libexpat1-2.1.0-21.18.1 is installed OR libexpat1-32bit-2.1.0-21.18.1 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND Package Information libvirt-2.0.0-26 is installed OR libvirt-client-2.0.0-26 is installed OR libvirt-daemon-2.0.0-26 is installed OR libvirt-daemon-config-network-2.0.0-26 is installed OR libvirt-daemon-config-nwfilter-2.0.0-26 is installed OR libvirt-daemon-driver-interface-2.0.0-26 is installed OR libvirt-daemon-driver-lxc-2.0.0-26 is installed OR libvirt-daemon-driver-network-2.0.0-26 is installed OR libvirt-daemon-driver-nodedev-2.0.0-26 is installed OR libvirt-daemon-driver-nwfilter-2.0.0-26 is installed OR libvirt-daemon-driver-qemu-2.0.0-26 is installed OR libvirt-daemon-driver-secret-2.0.0-26 is installed OR libvirt-daemon-driver-storage-2.0.0-26 is installed OR libvirt-daemon-lxc-2.0.0-26 is installed OR libvirt-daemon-qemu-2.0.0-26 is installed OR libvirt-doc-2.0.0-26 is installed OR libvirt-lock-sanlock-2.0.0-26 is installed OR libvirt-nss-2.0.0-26 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed AND Package Information kgraft-patch-4_4_121-92_101-default-3-2 is installed OR kgraft-patch-SLE12-SP2_Update_27-3-2 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND Package Information Mesa-devel-7.11.2-0.9.1 is installed OR Mesa-devel-32bit-7.11.2-0.9.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND MozillaFirefox-devel-17.0.9esr-0.7.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND PolicyKit-devel-0.9-14.43.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND Package Information bash-devel-4.2-75 is installed OR readline-devel-6.2-75 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND apache2-devel-2.4.16-5 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information DirectFB-devel-1.7.1-6 is installed OR lib++dfb-devel-1.7.1-6 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND augeas-devel-1.2.0-15 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND Package Information DirectFB-devel-1.7.1-6 is installed OR lib++dfb-devel-1.7.1-6 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND Package Information typelib-1_0-EvinceDocument-3_0-3.20.2-6.22 is installed OR typelib-1_0-EvinceView-3_0-3.20.2-6.22 is installed
BACK