Oval Definition:oval:org.opensuse.security:def:922
Revision Date:2022-01-28Version:1
Title:Security update for log4j12 (Important)
Description:

This update for log4j12 fixes the following issues:

- CVE-2022-23307: Fix deserialization issue by removing the chainsaw sub-package. (bsc#1194844) - CVE-2022-23305: Fix SQL injection by removing src/main/java/org/apache/log4j/jdbc/JDBCAppender.java. (bsc#1194843) - CVE-2022-23302: Fix remote code execution by removing src/main/java/org/apache/log4j/net/JMSSink.java. (bsc#1194842)
Family:unixClass:patch
Status:Reference(s):1193184
1194842
1194843
1194844
CVE-2016-10030
CVE-2016-10030
CVE-2017-15566
CVE-2017-15566
CVE-2017-17042
CVE-2018-10995
CVE-2018-10995
CVE-2018-7033
CVE-2018-7033
CVE-2019-6438
CVE-2019-6438
CVE-2022-23302
CVE-2022-23305
CVE-2022-23307
SUSE-SU-2022:0226-1
Platform(s):openSUSE 13.2
SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 15 SP2
SUSE Linux Enterprise Desktop 15 SP3
SUSE Linux Enterprise High Availability 15
SUSE Linux Enterprise High Performance Computing 15 SP2
SUSE Linux Enterprise High Performance Computing 15 SP3
SUSE Linux Enterprise Module for additional PackageHub packages 15
SUSE Linux Enterprise Module for Basesystem 15 SP2
SUSE Linux Enterprise Module for Basesystem 15 SP3
SUSE Linux Enterprise Module for High Performance Computing 15 SP1
SUSE Linux Enterprise Module for Legacy Software 15
SUSE Linux Enterprise Module for Live Patching 15
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15
SUSE Linux Enterprise Module for Public Cloud 15
SUSE Linux Enterprise Module for Server Applications 15
SUSE Linux Enterprise Module for Web Scripting 15
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 15 SP2
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise Server for SAP Applications 15 SP2
SUSE Linux Enterprise Server for SAP Applications 15 SP3
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Software Development Kit 12 SP1
SUSE Linux Enterprise Storage 7
SUSE Linux Enterprise Storage 7.1
SUSE Linux Enterprise Workstation Extension 12
SUSE Linux Enterprise Workstation Extension 15
SUSE Manager Proxy 4.1
SUSE Manager Proxy 4.2
SUSE Manager Retail Branch Server 4.2
SUSE Manager Server 4.1
SUSE Manager Server 4.2
SUSE Package Hub for SUSE Linux Enterprise 15
Product(s):
Definition Synopsis
  • SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed
  • AND Package Information
  • ruby2.1-rubygem-chef-10.32.2-3 is installed
  • OR rubygem-chef-10.32.2-3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 is installed
  • AND Package Information
  • MozillaFirefox-31.1.0esr-1 is installed
  • OR MozillaFirefox-translations-31.1.0esr-1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP1 is installed
  • AND Package Information
  • accountsservice-0.6.35-3 is installed
  • OR accountsservice-lang-0.6.35-3 is installed
  • OR libaccountsservice0-0.6.35-3 is installed
  • OR typelib-1_0-AccountsService-1_0-0.6.35-3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • AND Package Information
  • libXRes1-1.0.7-3 is installed
  • OR libXRes1-32bit-1.0.7-3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed
  • AND Package Information
  • yast2-buildtools-4.2.5-1.45 is installed
  • OR yast2-devtools-4.2.5-1.45 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 15 SP3 is installed
  • OR SUSE Linux Enterprise High Performance Computing 15 SP3 is installed
  • OR SUSE Linux Enterprise Module for Basesystem 15 SP3 is installed
  • OR SUSE Linux Enterprise Server 15 SP3 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed
  • OR SUSE Linux Enterprise Storage 7.1 is installed
  • OR SUSE Manager Proxy 4.2 is installed
  • OR SUSE Manager Retail Branch Server 4.2 is installed
  • OR SUSE Manager Server 4.2 is installed
  • AND log4j12-1.2.17-4.9.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise High Availability 15 is installed
  • AND Package Information
  • ruby2.5-rubygem-sprockets-3.7.2-3.3 is installed
  • OR rubygem-sprockets-3.7.2-3.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for additional PackageHub packages 15 is installed
  • AND Package Information
  • postgresql10-10.6-4.8 is installed
  • OR postgresql10-test-10.6-4.8 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed
  • AND Package Information
  • yast2-buildtools-4.2.5-1 is installed
  • OR yast2-devtools-4.2.5-1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for High Performance Computing 15 SP1 is installed
  • AND Package Information
  • libpmi0-18.08.5-1 is installed
  • OR libslurm32-17.11.13-6.15 is installed
  • OR libslurm33-18.08.5-1 is installed
  • OR perl-slurm-18.08.5-1 is installed
  • OR slurm-18.08.5-1 is installed
  • OR slurm-auth-none-18.08.5-1 is installed
  • OR slurm-config-18.08.5-1 is installed
  • OR slurm-config-man-18.08.5-1 is installed
  • OR slurm-devel-18.08.5-1 is installed
  • OR slurm-doc-18.08.5-1 is installed
  • OR slurm-lua-18.08.5-1 is installed
  • OR slurm-munge-18.08.5-1 is installed
  • OR slurm-node-18.08.5-1 is installed
  • OR slurm-pam_slurm-18.08.5-1 is installed
  • OR slurm-plugins-18.08.5-1 is installed
  • OR slurm-slurmdbd-18.08.5-1 is installed
  • OR slurm-sql-18.08.5-1 is installed
  • OR slurm-torque-18.08.5-1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Legacy Software 15 is installed
  • AND Package Information
  • java-1_8_0-openjdk-1.8.0.171-3.3 is installed
  • OR java-1_8_0-openjdk-demo-1.8.0.171-3.3 is installed
  • OR java-1_8_0-openjdk-devel-1.8.0.171-3.3 is installed
  • OR java-1_8_0-openjdk-headless-1.8.0.171-3.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Live Patching 15 is installed
  • AND kernel-livepatch-tools-1.1-5.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 is installed
  • AND Package Information
  • libopenssl1_0_0-hmac-1.0.2p-3.22 is installed
  • OR libopenssl1_0_0-steam-1.0.2p-3.22 is installed
  • OR openssl-1_0_0-1.0.2p-3.22 is installed
  • OR openssl-1_0_0-cavs-1.0.2p-3.22 is installed
  • OR openssl-1_0_0-doc-1.0.2p-3.22 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Public Cloud 15 is installed
  • AND Package Information
  • kernel-azure-4.12.14-5.8 is installed
  • OR kernel-azure-base-4.12.14-5.8 is installed
  • OR kernel-azure-devel-4.12.14-5.8 is installed
  • OR kernel-devel-azure-4.12.14-5.8 is installed
  • OR kernel-source-azure-4.12.14-5.8 is installed
  • OR kernel-syms-azure-4.12.14-5.8 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Server Applications 15 is installed
  • AND Package Information
  • rsyslog-8.33.1-3.3 is installed
  • OR rsyslog-module-gssapi-8.33.1-3.3 is installed
  • OR rsyslog-module-mysql-8.33.1-3.3 is installed
  • OR rsyslog-module-pgsql-8.33.1-3.3 is installed
  • OR rsyslog-module-relp-8.33.1-3.3 is installed
  • OR rsyslog-module-snmp-8.33.1-3.3 is installed
  • OR rsyslog-module-udpspoof-8.33.1-3.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Web Scripting 15 is installed
  • AND Package Information
  • apache2-mod_php7-7.2.5-4.3 is installed
  • OR php7-7.2.5-4.3 is installed
  • OR php7-bcmath-7.2.5-4.3 is installed
  • OR php7-bz2-7.2.5-4.3 is installed
  • OR php7-calendar-7.2.5-4.3 is installed
  • OR php7-ctype-7.2.5-4.3 is installed
  • OR php7-curl-7.2.5-4.3 is installed
  • OR php7-dba-7.2.5-4.3 is installed
  • OR php7-devel-7.2.5-4.3 is installed
  • OR php7-dom-7.2.5-4.3 is installed
  • OR php7-enchant-7.2.5-4.3 is installed
  • OR php7-exif-7.2.5-4.3 is installed
  • OR php7-fastcgi-7.2.5-4.3 is installed
  • OR php7-fileinfo-7.2.5-4.3 is installed
  • OR php7-fpm-7.2.5-4.3 is installed
  • OR php7-ftp-7.2.5-4.3 is installed
  • OR php7-gd-7.2.5-4.3 is installed
  • OR php7-gettext-7.2.5-4.3 is installed
  • OR php7-gmp-7.2.5-4.3 is installed
  • OR php7-iconv-7.2.5-4.3 is installed
  • OR php7-intl-7.2.5-4.3 is installed
  • OR php7-json-7.2.5-4.3 is installed
  • OR php7-ldap-7.2.5-4.3 is installed
  • OR php7-mbstring-7.2.5-4.3 is installed
  • OR php7-mysql-7.2.5-4.3 is installed
  • OR php7-odbc-7.2.5-4.3 is installed
  • OR php7-opcache-7.2.5-4.3 is installed
  • OR php7-openssl-7.2.5-4.3 is installed
  • OR php7-pcntl-7.2.5-4.3 is installed
  • OR php7-pdo-7.2.5-4.3 is installed
  • OR php7-pear-7.2.5-4.3 is installed
  • OR php7-pear-Archive_Tar-7.2.5-4.3 is installed
  • OR php7-pgsql-7.2.5-4.3 is installed
  • OR php7-phar-7.2.5-4.3 is installed
  • OR php7-posix-7.2.5-4.3 is installed
  • OR php7-shmop-7.2.5-4.3 is installed
  • OR php7-snmp-7.2.5-4.3 is installed
  • OR php7-soap-7.2.5-4.3 is installed
  • OR php7-sockets-7.2.5-4.3 is installed
  • OR php7-sqlite-7.2.5-4.3 is installed
  • OR php7-sysvmsg-7.2.5-4.3 is installed
  • OR php7-sysvsem-7.2.5-4.3 is installed
  • OR php7-sysvshm-7.2.5-4.3 is installed
  • OR php7-tokenizer-7.2.5-4.3 is installed
  • OR php7-wddx-7.2.5-4.3 is installed
  • OR php7-xmlreader-7.2.5-4.3 is installed
  • OR php7-xmlrpc-7.2.5-4.3 is installed
  • OR php7-xmlwriter-7.2.5-4.3 is installed
  • OR php7-xsl-7.2.5-4.3 is installed
  • OR php7-zip-7.2.5-4.3 is installed
  • OR php7-zlib-7.2.5-4.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 is installed
  • AND Package Information
  • libfreetype6-2.5.3-2.9 is installed
  • OR libfreetype6-32bit-2.5.3-2.18 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2 is installed
  • AND Package Information
  • libasan2-5.3.1+r233831-9.1 is installed
  • OR libasan2-32bit-5.3.1+r233831-9.1 is installed
  • OR libffi4-5.3.1+r233831-9.1 is installed
  • OR libffi4-32bit-5.3.1+r233831-9.1 is installed
  • OR libmpx0-5.3.1+r233831-9.1 is installed
  • OR libmpx0-32bit-5.3.1+r233831-9.1 is installed
  • OR libmpxwrappers0-5.3.1+r233831-9.1 is installed
  • OR libmpxwrappers0-32bit-5.3.1+r233831-9.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 15 is installed
  • AND Package Information
  • kernel-default-4.12.14-25.6 is installed
  • OR kernel-default-extra-4.12.14-25.6 is installed
    • Definition Synopsis
  • SUSE Package Hub for SUSE Linux Enterprise 15 is installed
  • AND Package Information
  • chromedriver-69.0.3497.92-bp150.2.7 is installed
  • OR chromium-69.0.3497.92-bp150.2.7 is installed
    • BACK