Oval Definition:	oval:org.opensuse.security:def:880
Revision Date: 2022-05-05 Version: 1 Title: Security update for tar (Moderate) Description: This update for tar fixes the following issues: - CVE-2021-20193: Fixed a memory leak in read_header() in list.c (bsc#1181131). - CVE-2019-9923: Fixed a null-pointer dereference in pax_decode_header in sparse.c (bsc#1130496). - CVE-2018-20482: Fixed infinite read loop in sparse_dump_region in sparse.c (bsc#1120610). - Update to GNU tar 1.34: * Fix extraction over pipe * Fix memory leak in read_header (CVE-2021-20193) (bsc#1181131) * Fix extraction when . and .. are unreadable * Gracefully handle duplicate symlinks when extracting * Re-initialize supplementary groups when switching to user privileges - Update to GNU tar 1.33: * POSIX extended format headers do not include PID by default * --delay-directory-restore works for archives with reversed member ordering * Fix extraction of a symbolic link hardlinked to another symbolic link * Wildcards in exclude-vcs-ignore mode don't match slash * Fix the --no-overwrite-dir option * Fix handling of chained renames in incremental backups * Link counting works for file names supplied with -T * Accept only position-sensitive (file-selection) options in file list files - prepare usrmerge (bsc#1029961) - Update to GNU 1.32 * Fix the use of --checkpoint without explicit --checkpoint-action * Fix extraction with the -U option * Fix iconv usage on BSD-based systems * Fix possible NULL dereference (savannah bug #55369) [bsc#1130496] [CVE-2019-9923] * Improve the testsuite - Update to GNU 1.31 * Fix heap-buffer-overrun with --one-top-level, bug introduced with the addition of that option in 1.28 * Support for zstd compression * New option '--zstd' instructs tar to use zstd as compression program. When listing, extractng and comparing, zstd compressed archives are recognized automatically. When '-a' option is in effect, zstd compression is selected if the destination archive name ends in '.zst' or '.tzst'. * The -K option interacts properly with member names given in the command line. Names of members to extract can be specified along with the '-K NAME' option. In this case, tar will extract NAME and those of named members that appear in the archive after it, which is consistent with the semantics of the option. Previous versions of tar extracted NAME, those of named members that appeared before it, and everything after it. * Fix CVE-2018-20482 - When creating archives with the --sparse option, previous versions of tar would loop endlessly if a sparse file had been truncated while being archived. Family: unix Class: patch Status: Reference(s): 1029961 1120610 1130496 1181131 CVE-2013-0211 CVE-2013-0211 CVE-2014-0222 CVE-2014-0223 CVE-2014-3461 CVE-2014-3640 CVE-2014-7840 CVE-2014-8106 CVE-2015-1779 CVE-2015-2304 CVE-2015-2304 CVE-2015-3209 CVE-2015-3456 CVE-2015-4037 CVE-2015-5154 CVE-2015-5225 CVE-2015-5278 CVE-2015-5279 CVE-2015-5745 CVE-2015-6815 CVE-2015-6855 CVE-2015-7295 CVE-2015-7512 CVE-2015-7549 CVE-2015-8345 CVE-2015-8504 CVE-2015-8558 CVE-2015-8567 CVE-2015-8568 CVE-2015-8613 CVE-2015-8619 CVE-2015-8743 CVE-2015-8744 CVE-2015-8745 CVE-2015-8917 CVE-2015-8917 CVE-2015-8928 CVE-2015-8928 CVE-2015-8933 CVE-2015-8933 CVE-2015-8934 CVE-2015-8934 CVE-2016-10028 CVE-2016-10155 CVE-2016-1541 CVE-2016-1541 CVE-2016-1568 CVE-2016-1714 CVE-2016-1922 CVE-2016-1981 CVE-2016-2198 CVE-2016-3710 CVE-2016-3712 CVE-2016-4002 CVE-2016-4020 CVE-2016-4300 CVE-2016-4300 CVE-2016-4301 CVE-2016-4301 CVE-2016-4439 CVE-2016-4441 CVE-2016-4453 CVE-2016-4454 CVE-2016-4809 CVE-2016-4809 CVE-2016-4952 CVE-2016-4964 CVE-2016-5105 CVE-2016-5106 CVE-2016-5107 CVE-2016-5126 CVE-2016-5238 CVE-2016-5337 CVE-2016-5338 CVE-2016-5403 CVE-2016-5418 CVE-2016-5418 CVE-2016-5844 CVE-2016-5844 CVE-2016-6250 CVE-2016-6250 CVE-2016-6351 CVE-2016-6490 CVE-2016-6833 CVE-2016-6836 CVE-2016-6888 CVE-2016-7116 CVE-2016-7155 CVE-2016-7156 CVE-2016-7157 CVE-2016-7161 CVE-2016-7170 CVE-2016-7421 CVE-2016-7422 CVE-2016-7423 CVE-2016-7466 CVE-2016-7907 CVE-2016-7908 CVE-2016-7909 CVE-2016-7994 CVE-2016-7995 CVE-2016-8576 CVE-2016-8577 CVE-2016-8578 CVE-2016-8667 CVE-2016-8668 CVE-2016-8669 CVE-2016-8687 CVE-2016-8687 CVE-2016-8688 CVE-2016-8688 CVE-2016-8689 CVE-2016-8689 CVE-2016-8909 CVE-2016-8910 CVE-2016-9101 CVE-2016-9102 CVE-2016-9103 CVE-2016-9104 CVE-2016-9105 CVE-2016-9106 CVE-2016-9381 CVE-2016-9602 CVE-2016-9776 CVE-2016-9845 CVE-2016-9846 CVE-2016-9907 CVE-2016-9908 CVE-2016-9911 CVE-2016-9912 CVE-2016-9913 CVE-2016-9921 CVE-2016-9922 CVE-2016-9923 CVE-2017-10664 CVE-2017-10806 CVE-2017-11334 CVE-2017-11434 CVE-2017-13672 CVE-2017-13673 CVE-2017-13711 CVE-2017-14166 CVE-2017-14166 CVE-2017-14167 CVE-2017-14501 CVE-2017-14501 CVE-2017-14502 CVE-2017-14502 CVE-2017-14503 CVE-2017-14503 CVE-2017-15038 CVE-2017-15118 CVE-2017-15119 CVE-2017-15268 CVE-2017-15289 CVE-2017-2615 CVE-2017-2620 CVE-2017-2630 CVE-2017-2633 CVE-2017-5525 CVE-2017-5526 CVE-2017-5552 CVE-2017-5578 CVE-2017-5579 CVE-2017-5667 CVE-2017-5715 CVE-2017-5856 CVE-2017-5857 CVE-2017-5898 CVE-2017-5931 CVE-2017-5973 CVE-2017-5987 CVE-2017-6058 CVE-2017-6505 CVE-2017-7471 CVE-2017-7493 CVE-2017-8112 CVE-2017-8309 CVE-2017-8379 CVE-2017-8380 CVE-2017-9503 CVE-2017-9524 CVE-2018-1000877 CVE-2018-1000877 CVE-2018-1000878 CVE-2018-1000878 CVE-2018-1000879 CVE-2018-1000879 CVE-2018-1000880 CVE-2018-1000880 CVE-2018-10839 CVE-2018-11806 CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2018-12207 CVE-2018-12617 CVE-2018-15746 CVE-2018-16847 CVE-2018-16872 CVE-2018-17958 CVE-2018-17962 CVE-2018-17963 CVE-2018-18849 CVE-2018-20123 CVE-2018-20124 CVE-2018-20125 CVE-2018-20126 CVE-2018-20191 CVE-2018-20216 CVE-2018-20482 CVE-2018-20815 CVE-2018-3639 CVE-2018-7550 CVE-2018-7858 CVE-2019-1000019 CVE-2019-1000019 CVE-2019-1000020 CVE-2019-1000020 CVE-2019-11091 CVE-2019-11135 CVE-2019-12068 CVE-2019-12155 CVE-2019-13164 CVE-2019-14378 CVE-2019-15890 CVE-2019-5008 CVE-2019-6778 CVE-2019-8934 CVE-2019-9824 CVE-2019-9923 CVE-2020-10702 CVE-2020-11102 CVE-2020-11869 CVE-2020-1711 CVE-2020-1983 CVE-2020-7039 CVE-2020-8608 CVE-2021-20193 SUSE-SU-2022:1548-1 Platform(s): openSUSE 13.2 NonFree SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 15 SP2 SUSE Linux Enterprise Desktop 15 SP3 SUSE Linux Enterprise High Availability 15 SUSE Linux Enterprise High Performance Computing 15 SP2 SUSE Linux Enterprise High Performance Computing 15 SP3 SUSE Linux Enterprise Module for additional PackageHub packages 15 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for High Performance Computing 15 SUSE Linux Enterprise Module for Legacy Software 15 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SUSE Linux Enterprise Module for Public Cloud 15 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Web Scripting 15 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 15 SP2 SUSE Linux Enterprise Server 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Storage 7 SUSE Linux Enterprise Storage 7.1 SUSE Linux Enterprise Workstation Extension 15 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.1 SUSE Manager Server 4.2 Product(s): Definition Synopsis SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed AND haproxy-1.5.4-1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information accountsservice-0.6.35-1 is installed OR accountsservice-lang-0.6.35-1 is installed OR libaccountsservice0-0.6.35-1 is installed OR typelib-1_0-AccountsService-1_0-0.6.35-1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information MozillaFirefox-38.4.0esr-51 is installed OR MozillaFirefox-translations-38.4.0esr-51 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information gnome-settings-daemon-3.20.1-49 is installed OR gnome-settings-daemon-lang-3.20.1-49 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed AND qemu-tools-4.2.0-9.4 is installed Definition Synopsis Release Information SUSE Linux Enterprise Desktop 15 SP3 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP3 is installed OR SUSE Linux Enterprise Module for Basesystem 15 SP3 is installed OR SUSE Linux Enterprise Server 15 SP3 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed OR SUSE Linux Enterprise Storage 7.1 is installed OR SUSE Manager Proxy 4.2 is installed OR SUSE Manager Retail Branch Server 4.2 is installed OR SUSE Manager Server 4.2 is installed AND Package Information tar-1.34-150000.3.12.1 is installed OR tar-lang-1.34-150000.3.12.1 is installed OR tar-rmt-1.34-150000.3.12.1 is installed Definition Synopsis SUSE Linux Enterprise High Availability 15 is installed AND Package Information ruby2.5-rubygem-sprockets-3.7.2-3.3 is installed OR rubygem-sprockets-3.7.2-3.3 is installed Definition Synopsis SUSE Linux Enterprise Module for additional PackageHub packages 15 is installed AND Package Information glib2-2.54.3-4.7 is installed OR glib2-devel-32bit-2.54.3-4.7 is installed OR glib2-tools-32bit-2.54.3-4.7 is installed OR libgthread-2_0-0-32bit-2.54.3-4.7 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed AND qemu-tools-4.2.0-9 is installed Definition Synopsis SUSE Linux Enterprise Module for Development Tools 15 is installed AND Package Information libsolv-0.6.35-3.5 is installed OR perl-solv-0.6.35-3.5 is installed OR python3-solv-0.6.35-3.5 is installed OR ruby-solv-0.6.35-3.5 is installed Definition Synopsis SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed AND bsdtar-3.3.2-3.8 is installed Definition Synopsis SUSE Linux Enterprise Module for High Performance Computing 15 is installed AND Package Information python-numpy_1_14_0-gnu-hpc-1.14.0-4.5 is installed OR python2-numpy-gnu-hpc-1.14.0-4.5 is installed OR python2-numpy-gnu-hpc-devel-1.14.0-4.5 is installed OR python2-numpy_1_14_0-gnu-hpc-1.14.0-4.5 is installed OR python2-numpy_1_14_0-gnu-hpc-devel-1.14.0-4.5 is installed OR python3-numpy-gnu-hpc-1.14.0-4.5 is installed OR python3-numpy-gnu-hpc-devel-1.14.0-4.5 is installed OR python3-numpy_1_14_0-gnu-hpc-1.14.0-4.5 is installed OR python3-numpy_1_14_0-gnu-hpc-devel-1.14.0-4.5 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 is installed AND Package Information java-1_8_0-openjdk-1.8.0.171-3.3 is installed OR java-1_8_0-openjdk-demo-1.8.0.171-3.3 is installed OR java-1_8_0-openjdk-devel-1.8.0.171-3.3 is installed OR java-1_8_0-openjdk-headless-1.8.0.171-3.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 is installed AND Package Information kernel-default-4.12.14-25.6 is installed OR kernel-default-livepatch-4.12.14-25.6 is installed OR kernel-livepatch-4_12_14-25_6-default-1-1.3 is installed OR kernel-livepatch-SLE15_Update_2-1-1.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 is installed AND Package Information ImageMagick-7.0.7.34-3.67 is installed OR ImageMagick-doc-7.0.7.34-3.67 is installed OR ImageMagick-extra-7.0.7.34-3.67 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 15 is installed AND Package Information kernel-azure-4.12.14-5.13 is installed OR kernel-azure-base-4.12.14-5.13 is installed OR kernel-azure-devel-4.12.14-5.13 is installed OR kernel-devel-azure-4.12.14-5.13 is installed OR kernel-source-azure-4.12.14-5.13 is installed OR kernel-syms-azure-4.12.14-5.13 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 is installed AND Package Information qemu-2.11.2-9.4 is installed OR qemu-arm-2.11.2-9.4 is installed OR qemu-block-curl-2.11.2-9.4 is installed OR qemu-block-iscsi-2.11.2-9.4 is installed OR qemu-block-rbd-2.11.2-9.4 is installed OR qemu-block-ssh-2.11.2-9.4 is installed OR qemu-guest-agent-2.11.2-9.4 is installed OR qemu-ipxe-1.0.0-9.4 is installed OR qemu-kvm-2.11.2-9.4 is installed OR qemu-lang-2.11.2-9.4 is installed OR qemu-ppc-2.11.2-9.4 is installed OR qemu-s390-2.11.2-9.4 is installed OR qemu-seabios-1.11.0-9.4 is installed OR qemu-sgabios-8-9.4 is installed OR qemu-vgabios-1.11.0-9.4 is installed OR qemu-x86-2.11.2-9.4 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 is installed AND Package Information apache2-mod_php7-7.2.5-4.9 is installed OR php7-7.2.5-4.9 is installed OR php7-bcmath-7.2.5-4.9 is installed OR php7-bz2-7.2.5-4.9 is installed OR php7-calendar-7.2.5-4.9 is installed OR php7-ctype-7.2.5-4.9 is installed OR php7-curl-7.2.5-4.9 is installed OR php7-dba-7.2.5-4.9 is installed OR php7-devel-7.2.5-4.9 is installed OR php7-dom-7.2.5-4.9 is installed OR php7-enchant-7.2.5-4.9 is installed OR php7-exif-7.2.5-4.9 is installed OR php7-fastcgi-7.2.5-4.9 is installed OR php7-fileinfo-7.2.5-4.9 is installed OR php7-fpm-7.2.5-4.9 is installed OR php7-ftp-7.2.5-4.9 is installed OR php7-gd-7.2.5-4.9 is installed OR php7-gettext-7.2.5-4.9 is installed OR php7-gmp-7.2.5-4.9 is installed OR php7-iconv-7.2.5-4.9 is installed OR php7-intl-7.2.5-4.9 is installed OR php7-json-7.2.5-4.9 is installed OR php7-ldap-7.2.5-4.9 is installed OR php7-mbstring-7.2.5-4.9 is installed OR php7-mysql-7.2.5-4.9 is installed OR php7-odbc-7.2.5-4.9 is installed OR php7-opcache-7.2.5-4.9 is installed OR php7-openssl-7.2.5-4.9 is installed OR php7-pcntl-7.2.5-4.9 is installed OR php7-pdo-7.2.5-4.9 is installed OR php7-pear-7.2.5-4.9 is installed OR php7-pear-Archive_Tar-7.2.5-4.9 is installed OR php7-pgsql-7.2.5-4.9 is installed OR php7-phar-7.2.5-4.9 is installed OR php7-posix-7.2.5-4.9 is installed OR php7-shmop-7.2.5-4.9 is installed OR php7-snmp-7.2.5-4.9 is installed OR php7-soap-7.2.5-4.9 is installed OR php7-sockets-7.2.5-4.9 is installed OR php7-sqlite-7.2.5-4.9 is installed OR php7-sysvmsg-7.2.5-4.9 is installed OR php7-sysvsem-7.2.5-4.9 is installed OR php7-sysvshm-7.2.5-4.9 is installed OR php7-tokenizer-7.2.5-4.9 is installed OR php7-wddx-7.2.5-4.9 is installed OR php7-xmlreader-7.2.5-4.9 is installed OR php7-xmlrpc-7.2.5-4.9 is installed OR php7-xmlwriter-7.2.5-4.9 is installed OR php7-xsl-7.2.5-4.9 is installed OR php7-zip-7.2.5-4.9 is installed OR php7-zlib-7.2.5-4.9 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND gzip-1.6-7.392 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information hplip-3.14.6-3.5 is installed OR hplip-hpijs-3.14.6-3.5 is installed OR hplip-sane-3.14.6-3.5 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information kernel-default-4.12.14-25.6 is installed OR kernel-default-extra-4.12.14-25.6 is installed
BACK